Right to Privacy Report: The Erosion of Fundamental Rights via Institutionalised Digital Harassment at ICICI Bank
Until financial institutions are compelled to respect informational self-determination, India’s digital transformation will remain technologically advanced but democratically hollow.
RMN Foundation Fundamental Rights Report
New Delhi | April 21, 2026
Overview: Digital Banking as a Tool for Rights Abuse
The transition to digital banking in India is increasingly being marred by what the RMN Foundation identifies as institutionalised digital harassment. Under the guise of “regulatory compliance,” financial institutions like ICICI Bank are accused of launching a relentless barrage of KYC (Know Your Customer) emails, SMS alerts, and automated warnings that constitute a direct assault on the fundamental right to privacy. This conduct persists despite the landmark 2017 Supreme Court judgment in Justice K.S. Puttaswamy (Retd.) vs Union of India, which established privacy as intrinsic to life and personal liberty under Article 21.
The Failure of Automated Systems and Data Integrity
A critical concern highlighted by this report is the systemic failure of the bank’s internal data management. ICICI Bank consistently sends contradictory and intrusive communications, often including the absurd instruction to “ignore if KYC is already updated”. This phrase is viewed as a public admission that the bank’s digital systems lack real-time record synchronization.
These technological weaknesses represent a significant security vulnerability. Experts suggest that such legacy software flaws could be exploited by emerging developments like Anthropic’s Claude Mythos, signaling an urgent need for the bank to audit its systems to protect customer data and assets.
Chronology of Harassment and Operational Incompetence
The RMN Foundation has documented several instances of operational chaos and staff incompetence:
- Targeting Incorrect Accounts: On November 26, 2025, the bank sent KYC notices regarding a savings account with no issues, while ignoring a customer’s actual grievance regarding a current account.
- Aggressive Automated Outreach: On December 3, 2025, the bank continued to send “obnoxious” emails despite previous complaints.
- Persistent Disruptions: After a brief respite, the harassment resumed in early 2026. As recently as April 20, 2026, the bank bombarded the victim Rakesh Raman of RMN Foundation with both email and mobile alerts for account that required no update.
Rakesh Raman, founder of the RMN Foundation and a technology expert, argues that these “digital excesses” prove how hollow digital governance has become. He notes that banks frequently evade responsibility by hiding behind algorithms and call-centre scripts, treating citizens as mere data points rather than rights-bearing individuals.
Constitutional Non-Compliance
Under constitutional jurisprudence, any intrusion into a citizen’s privacy must satisfy the three-fold test of legality, necessity, and proportionality. ICICI Bank’s conduct fails all three:
- Legality: There is no legal mandate to repeatedly disturb low-risk customers whose records remain unchanged.
- Necessity: Automated intimidation serves no legitimate regulatory purpose when the bank already possesses the required data.
- Proportionality: Sending daily warnings without verification is an excessive and undignified response to administrative requirements.
Demands for Reform and Accountability
The RMN Foundation views this crisis as emblematic of a collapse in digital-age governance. To restore constitutional morality and consumer trust, the Foundation calls for the following actions:
- RBI Investigation: The Reserve Bank of India must examine ICICI Bank’s broken KYC systems and its failure to adhere to simplified KYC norms.
- Technological Modernization: Banks must implement AI-based validation to detect unchanged profiles and create a simple one-click “YES/NO” digital confirmation process to replace physical branch visits.
- Legal Enforcement: India requires a strong, independent privacy regime to penalize corporations for psychological pressure and arbitrary interference.
Compliance must not be used as an excuse for cruelty. Until financial institutions are compelled to respect informational self-determination, India’s digital transformation will remain technologically advanced but democratically hollow.
Donation to RMN Foundation
