COMMUNICATION CONFIDENTIALITY BREACHES

Detailed Explanation With Case Laws

1. Introduction

Communication confidentiality is an important principle in employment and industrial relations. Employees and employers routinely exchange confidential information through emails, letters, messaging applications, meetings, telephone calls, HR systems and internal reports. Such communications may contain personal information, salary details, disciplinary records, trade secrets, business strategies, customer information, legal advice or information relating to workplace complaints.

A communication confidentiality breach occurs when confidential workplace communication is accessed, disclosed, copied, forwarded, recorded or used without proper authority or contrary to a legal, contractual or organisational duty.

Indian law protects confidentiality through a combination of contract law, privacy principles, employment obligations, equitable principles and specific statutory protections. The Supreme Court has recognized privacy as a constitutionally protected right under Article 21, while also distinguishing privacy from the broader concept of confidentiality.

2. Meaning of Communication Confidentiality

Communication confidentiality means that information communicated within a relationship of trust should not be disclosed to persons who are not legally or legitimately entitled to receive it.

In employment relationships, confidential communications may include:

Employer-employee emails;

HR disciplinary communications;

Salary and compensation discussions;

Medical or personal information;

Grievance and complaint communications;

Sexual-harassment complaints and inquiry material;

Trade secrets and commercial information;

Customer and supplier information;

Internal legal advice;

Performance evaluations;

Investigation reports;

Passwords and access credentials;

Confidential business strategies; and

Communications concerning proposed restructuring or termination.

Confidentiality may arise from an express contract, an implied employment obligation, statutory provisions, professional obligations or the nature of the relationship itself. The Supreme Court has recognized that confidentiality may arise contractually or through law and may exist independently of privacy.

3. What Constitutes a Breach?

A breach may occur through:

Unauthorized forwarding of an employer's email;

Disclosure of an employee's complaint to unrelated employees;

Sharing confidential HR records;

Recording a private workplace conversation without lawful justification;

Publishing internal communications on social media;

Copying confidential files before resignation;

Sending confidential information to a competitor;

Unauthorized access to another employee's mailbox;

Disclosure of salary or disciplinary information;

Circulation of investigation reports;

Sharing confidential customer data; or

Using confidential information for personal or competitive purposes.

The seriousness of the breach depends upon the nature of the information, the relationship between the parties, authorization, contractual obligations, purpose of disclosure and resulting harm.

4. Confidentiality and Right to Privacy

The Supreme Court in K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1 recognized privacy as a constitutionally protected right flowing principally from Article 21. Privacy includes interests relating to dignity, autonomy and control over personal information.

However, confidentiality and privacy are not identical. The Supreme Court has explained that confidentiality is broader than privacy in certain contexts and may arise from contractual, equitable or statutory obligations.

Therefore, an employee may have confidentiality protection even where a particular communication does not independently amount to constitutionally protected private information.

5. Employer's Duty Regarding Employee Communications

Employers should exercise reasonable care when handling confidential employee information. HR departments normally possess sensitive information relating to:

wages;

medical information;

disciplinary proceedings;

complaints;

performance;

family information;

identification documents; and

employment records.

Unauthorized disclosure may expose an employer to contractual, statutory or other legal consequences.

The principle is particularly important where disclosure can cause professional, financial or reputational harm to an employee.

6. Employee's Duty of Confidentiality

Employees can also owe substantial confidentiality obligations to their employers.

An employee may be prohibited from disclosing:

trade secrets;

technical information;

business plans;

customer lists;

pricing information;

proprietary software;

confidential contracts;

internal strategies;

passwords;

financial information; and

confidential communications.

The obligation may continue after employment where the information remains genuinely confidential and the law or contract supports continuing protection.

7. Important Case Laws

1. K.S. Puttaswamy (Retd.) v. Union of India

(2017) 10 SCC 1

The Supreme Court's Constitution Bench recognized the right to privacy as a fundamental right under Article 21. Privacy encompasses dignity, autonomy and protection against unjustified intrusion.

Legal Principle:

Workplace handling of personal communications must respect legitimate privacy interests. An employer or other authority cannot assume that all information relating to an employee is automatically free from privacy considerations.

The judgment provides the constitutional foundation for considering privacy when dealing with electronic communications and personal information.

2. R. Rajagopal v. State of Tamil Nadu

(1994) 6 SCC 632

The Supreme Court considered the right to privacy and unauthorized publication of private information.

Legal Principle:

Individuals possess a legally protected interest in preventing unauthorized publication of matters belonging to their private life, subject to recognized legal exceptions.

Employment Relevance:

The principle is relevant when employers or employees disclose private information contained in workplace communications without lawful justification.

3. People's Union for Civil Liberties (PUCL) v. Union of India

(1997) 1 SCC 301

The Supreme Court dealt with telephone interception and emphasized procedural safeguards governing interception of communications.

Legal Principle:

Communication interception constitutes a serious intrusion into privacy and must be governed by appropriate legal safeguards.

Employment Relevance:

Workplace monitoring of telephone calls, electronic communications and similar communications should not be treated as an unlimited managerial power. Legitimate monitoring should have an appropriate legal and organizational basis.

4. Mr. X v. Hospital Z

(1998) 8 SCC 296

The Supreme Court examined confidentiality relating to sensitive medical information.

Legal Principle:

Medical information ordinarily carries an expectation of confidentiality, although confidentiality is not absolute and may yield to legally recognized interests.

Employment Relevance:

Where an employer receives an employee's medical information, the information should not ordinarily be circulated unnecessarily among managers or co-workers.

This principle is particularly relevant to occupational health records, disability-related information and medical documentation.

5. Niranjan Shankar Golikari v. Century Spinning & Manufacturing Co. Ltd.

AIR 1967 SC 1098

The Supreme Court considered contractual restrictions imposed upon an employee and recognized the importance of protecting the employer's legitimate business interests.

Legal Principle:

Employment contracts may legitimately protect confidential business interests, particularly during the subsistence of employment, provided the restriction is legally enforceable.

Employment Relevance:

An employee who improperly communicates confidential technical or commercial information may face contractual consequences where the employer has a legitimate confidentiality interest.

6. American Express Bank Ltd. v. Priya Puri

2006 (2) LLJ 540 (Delhi)

The Delhi High Court considered the protection of confidential business information and customer-related information in the employment context.

Legal Principle:

Confidential information belonging to an employer may receive legal protection, but the court must distinguish genuine confidential information from information that merely forms part of an employee's general knowledge, skill or experience.

Employment Relevance:

An employee cannot necessarily be restrained from using ordinary professional knowledge, but genuinely confidential business information may be protected against unauthorized disclosure or use.

7. Zee Telefilms Ltd. v. Sundial Communications Pvt. Ltd.

2003 (27) PTC 457 (Bombay)

The Bombay High Court considered confidentiality and the protection of commercially sensitive information.

Legal Principle:

Information communicated in circumstances creating an obligation of confidence can attract legal protection against unauthorized use or disclosure.

Employment Relevance:

Confidential communications concerning business proposals, commercial strategies and proprietary material may be protected where the necessary relationship of confidence exists.

8. Digital Communication and Confidentiality

Modern employment relationships increasingly depend upon:

Email;

WhatsApp;

Microsoft Teams;

Slack;

video conferences;

cloud storage;

HR portals;

electronic payroll systems; and

AI-assisted communication systems.

Consequently, confidentiality breaches can occur instantly and may be difficult to reverse.

For example, forwarding a confidential termination proposal to an unauthorized employee may constitute a breach even if the message is subsequently deleted. Similarly, uploading confidential employee records to an unauthorized cloud service may expose sensitive information to third parties.

The Supreme Court has recognized that technology can be used to intrude into the private sphere and has emphasized the importance of protecting privacy in the digital environment.

9. Confidentiality During Disciplinary Proceedings

Disciplinary proceedings frequently contain sensitive information.

Confidentiality may concern:

allegations;

witness statements;

investigation reports;

evidence;

employee explanations;

disciplinary recommendations; and

final decisions.

Unnecessary disclosure can prejudice employees, witnesses or the integrity of an investigation.

However, confidentiality cannot be used as a mechanism to deny an employee procedural fairness. An employee facing disciplinary action must ordinarily receive the information necessary to defend himself or herself in accordance with applicable law and service rules.

Thus, confidentiality and natural justice must be balanced.

10. Confidentiality of Workplace Complaints

Employee complaints involving harassment, discrimination, retaliation or misconduct often contain highly sensitive information.

The organization should restrict access to people who have a legitimate role in receiving, investigating or deciding the complaint.

Disclosure to unrelated employees may:

discourage employees from reporting misconduct;

expose complainants to retaliation;

compromise witnesses;

damage reputations; and

undermine confidence in internal grievance mechanisms.

Confidentiality, however, does not mean that misconduct allegations can never be disclosed. Information may need to be shared with investigators, disciplinary authorities, courts, regulators or other legally authorized persons.

11. Unauthorized Recording of Workplace Communications

Recording workplace conversations creates a particularly complex issue.

Relevant factors include:

Who made the recording?

Whether consent was obtained;

Whether the person had authority to record;

Whether the communication was private;

Whether organizational policy permitted monitoring;

The purpose of the recording;

Applicable statutory rules; and

Whether the recording is subsequently disclosed or misused.

The constitutional privacy framework requires careful consideration of the circumstances rather than treating every workplace communication as either completely private or completely public.

12. Exceptions to Confidentiality

Confidentiality is not absolute.

Disclosure may be justified where:

required by law;

ordered by a court or tribunal;

required by a regulator;

necessary for investigation of serious misconduct;

required for legal proceedings;

necessary to prevent serious wrongdoing;

authorized by the person concerned; or

necessary for legitimate organizational purposes.

Therefore, an employee cannot automatically claim confidentiality merely because information was communicated internally.

The legality of disclosure depends upon the particular circumstances and the applicable legal duty.

13. Consequences of a Communication Confidentiality Breach

A breach may result in:

A. Disciplinary Action

An employee may face warning, suspension or termination where unauthorized disclosure constitutes misconduct under applicable service rules.

B. Contractual Liability

A confidentiality agreement may provide contractual remedies for unauthorized disclosure.

C. Injunction

Courts may restrain the unauthorized use or disclosure of genuinely confidential information where the legal requirements are satisfied.

D. Damages

Depending upon the applicable legal basis and proof of loss, compensation may be claimed for wrongful disclosure.

E. Privacy Claims

Unauthorized handling of personal communications may raise privacy concerns, particularly where the circumstances involve a serious intrusion into personal information.

F. Reputational Harm

Disclosure of confidential complaints, medical information or disciplinary records can cause serious professional and personal consequences.

14. Employer's Preventive Responsibilities

Organizations should establish clear confidentiality systems, including:

Written confidentiality policies;

Data-access controls;

Role-based HR permissions;

Secure email systems;

Encryption where appropriate;

Employee confidentiality agreements;

Clear monitoring policies;

Confidential complaint procedures;

Secure document retention;

Employee training;

Investigation protocols;

Restrictions on forwarding confidential material;

Secure disposal of records; and

Procedures for responding to data breaches.

These measures reduce both intentional and accidental confidentiality breaches.

15. Important Distinction: Confidentiality vs. Secrecy

Confidentiality does not mean that an organization can hide unlawful conduct.

A confidentiality rule should not be interpreted as giving an employer unlimited authority to prevent:

lawful reporting;

participation in legal proceedings;

disclosure required by law;

legitimate whistleblowing;

evidence required by a competent authority; or

an employee's lawful exercise of statutory rights.

The central issue is whether the information is legitimately confidential and whether the disclosure is legally authorized.

16. Conclusion

Communication confidentiality is an essential component of modern employment law. Employees and employers exchange substantial amounts of sensitive information through traditional and digital communication systems. Unauthorized access, disclosure, forwarding, recording or use of such information may create contractual, employment, privacy or other legal consequences.

Indian jurisprudence recognizes both privacy and confidentiality, while distinguishing the two concepts. K.S. Puttaswamy establishes the constitutional importance of privacy, whereas cases concerning confidential business information demonstrate that contractual and equitable duties may independently protect confidential material.

Therefore, employers should establish clear confidentiality procedures, restrict access to sensitive communications and ensure that legitimate confidentiality requirements are balanced with natural justice, lawful disclosure and employees' privacy interests. Employees, similarly, must respect confidential employer information obtained through their employment.

In short, a communication confidentiality breach occurs when protected workplace information is disclosed, accessed or used without proper authority, and the legal consequences depend upon the nature of the information, the source of the confidentiality obligation, the circumstances of disclosure and the applicable law.