Author: Priti Das, University of Calcutta

With the rapid growth of digital commerce , targeted behavioral advertising has become a common practice used by digital platforms to influence consumer choices . This research paper examines the legal and ethical issues arising from the use of targeted behavioral advertising in India. It focuses on how personal data such as browsing history , online activity and consumer preferences are collected to provide personalized advertisements. The paper also analyses the conflict between the growth of digital marketing and the protection of consumer privacy, especially the right to be left alone. This research is based on a doctrinal method and studies the existing legal framework in India, including laws related to privacy and data protection. The paper finds that the present legal provisions are not fully adequate to regulate targeted behavioral advertising and do not provide sufficient protection to consumers. It further highlights the need for stronger legal rules and better protection of consumer rights in  the digital marketplace . 

Keywords

Targeted Behavioral Advertising, Digital Commerce, Consumer Privacy, Data Protection, Personal Data, Right to Privacy, Consumer Autonomy.

In recent years , advertising has exercised a significant influence on the growth of the digital economy and more broadly , on the functioning of the digital information system . The rapid expansion of digital commerce has substantially transformed the manner in which businesses interact with consumers. Online platforms such as e-commerce websites, social media networks and search engines increasingly rely on behavioral advertising as their primary marketing strategy. 

In this process, individuals are often targeted through the collection and use of personal data which are obtained in multiple ways to display personalized advertisements. While this development has enhanced the effectiveness of digital marketing , it has simultaneously given rise to serious ethical privacy concerns. 

A crucial legal question that arises in this context is whether the existing legal provisions are sufficient to regulate the collection and use of personal data for advertising purposes. Although Indian law recognizes the importance of privacy and data protection, the current legal framework does not adequately address behavioral advertising and algorithm -based targeting. 

This research therefore examines the growing tension between consumer privacy and targeted behavioral advertising. As digital commerce continues to evolve, significant uncertainty remains regarding whether existing legal provisions can effectively regulate emerging technologies. The study aims to identify the specific areas where legal protection is insufficient, particularly in relation to the lack of transparent consent and the need to better regulate how digital platforms target individuals. 

The rise of digital platforms has turned targeted behavioral advertising,  where ads are customized based on a user’s online habits and personal data , into a core part of digital commerce. This shift has triggered significant global discussion among legal experts, courts and regulators regarding how to balance effective marketing with individual privacy, data protection, and consumer rights. 

The 2017 Supreme Court judgement in Justice K.S. Puttaswamy  v. Union of India  marked a revolutionary moment in Indian law , transforming the right to privacy into a fundamental part of personal liberty. While academic experts have appreciated this ruling for improving personal privacy and setting the stage for strong data protection, a significant conflict exists regarding its practical application in digital commerce. Although the ruling provides a solid constitutional basis to protect disclosure of private information, it does not explicitly regulate the widespread use of personal data for targeted advertising and digital marketing by private entities . 

One of the studies conducted by Avani Verma, “Targeted Advertising : Ethical or Unethical? A Content Analysis of Various Media Outlets and Users”, published in “ International Journal of Law Management &Humanities” highlights the need for legislation regarding targeted advertising and data protection . 

Reports published by regulatory authorities and policy bodies have raised serious concerns regarding risks associated with data driven advertising, critically stressing regulations that specifically address transparency, explicit consent from the user and accountability . International regulatory framework such as General Data Protection Regulation (GDPR) is widely considered a strong model for protecting personal data . 

A study conducted by Giovanni Sartor, “Regulating Targeted and Behavioral advertising in digital services: how to ensure user’s informed consent,” commissioned by the European Parliament , provides a comprehensive analysis of the regulation of behavioral and targeted advertising within digital services , focusing on European Union   data protection laws and user consent practices . 

While existing studies often discuss digital marketing and data privacy in a general way, there is limited research specifically covering targeted behavioral advertising in India. There is a clear gap in understanding whether current Indian laws are strong enough to protect consumer privacy against modern online tracking methods. This paper aims to bridge that gap by examining the legal and ethical dilemmas surrounding personalized, behavior based ads and evaluating the effectiveness of India’s current legal framework. Ultimately, this research contributes to the ongoing debate on digital regulation and highlights the urgent need for better legal protections for consumers in India’s fast evolving digital market . 

The present research paper is based primarily on a doctrinal research methodology as the main objective of this research is to examine the legal regulation of targeted behavioral advertising in digital commerce. The study focuses on analysing the existing legal framework in India relating to privacy , data protection and consumer protection, particularly in the context of the collection and use of personal data for advertising purposes.

The research also includes a comparative analytical approach in order to evaluate how other legal systems regulate targeted behavioural  advertising. In particular, this study examines international legal frameworks such as the General Data Protection Regulation, which is widely regarded as one of the most comprehensive data protection regimes in the world. By comparing the Indian legal framework with international standards, the research aims to identify the strengths and weaknesses of the existing legal provisions in India and to understand whether strong regulatory measures are required . 

In addition to statutory provisions and judicial decisions , the research makes use of scholarly articles, journal publications and reports published by regulatory authorities. These sources have been analysed in order to understand the legal and ethical concerns arising from targeted behavioral advertising and the challenges faced by consumers in the digital marketplace. The use of secondary legal sources is particularly suitable for this research because the topic primarily involves the interpretation and evaluation of existing legal rules rather than the collection of primary data . 

Therefore, the doctrinal and comparative  research methods adopted in this paper are appropriate for achieving the research objectives. These methods help in examining the legal framework, identifying the legal gaps in the regulation of targeted behavioral advertising and suggesting possible legal reforms for the protection of consumer privacy in digital commerce. 

The expansion of the digital economy has fundamentally changed the way advertising operates. Traditional advertising was based on general preferences, whereas modern digital platforms rely on the collection and analysis of personal data to achieve their marketing objectives. Targeted behavioral advertising functions by keeping a continuous check on the user’s online activities such as browsing history, search patterns, social media interaction and various other strategies. This technological transformation has created a direct conflict between commercial interests and the protection of personal privacy. 

In the Indian context, this issue has become more significant with the recognition of privacy as a fundamental right. The Supreme Court in Justice K.S. Puttaswamy v. Union of India has given utmost importance to informational privacy by making it an essential element of personal liberty under Article 21 of the Constitution. When the individuals have the right to control their personal data, the unauthorized use of it raises serious constitutional concerns. 

Another important issue relates to the concept of consent . Digital platforms often claim that the users agree to the collection of personal data and they strictly adhere to the data protection laws. However , in reality , most of the users are not even aware that their personal data is being used and it influences their decision making. This raises important questions regarding the validity of consent in digital platforms . 

The absence of a specific legal framework regulating behavioral advertising in India makes the problem more complex . 

The Information Technology Act 2000 provides certain safeguards regarding the protection of sensitive personal data, particularly under Section 43A, which imposes liability on companies that fail to protect such data . However the primary objective of this provision is to ensure security of data , not regulating the commercial use of personal information . 

Similarly, the Consumer Protection Act 2019 prohibits unfair trade practices and misleading advertisements. But targeted behavioral advertising does not always involve misleading information. It is all about tracking the consumer interests to influence their behaviour. 

Another important limitation is the lack of transparency requirements. Companies are not always required to inform the users about how their data will be used. This type of situation raises questions on the system and compels the users to think twice before they act on digital platforms .

Targeted behavioral advertising gives rise to several important legal issues . One of the most important issues is whether such practices violate the right to privacy recognized under Article 21. Since targeted advertising is based on the continuous monitoring of user behaviour, it is evident that such practices amount to an unreasonable interference with personal privacy. This has also weakened the concept of individual autonomy by curtailing the ethical right of individuals to exercise self-governance in digital markets.

Simultaneously, the data collected always poses a risk that it may be used beyond advertising. It is often seen that data collected for commercial purposes are used for several other purposes having harmful consequences on the individuals. This clearly  indicates lack of accountability.

Transparency is also a major concern. Users hardly know that their online behaviour is being continuously monitored. Little do they realize that they are mere puppets, manipulated through targeted behavioral advertising. 

At the same time, these legal concerns are closely connected to the technological mechanisms that facilitate behavioural advertising. Advanced technological tools have a substantial role in shaping such advertising practices . 

Targeted behavioural advertising is largely driven by advanced technologies such as artificial intelligence and machine learning. The digital platforms use these technologies to collect large volumes of user data and predict consumer behaviour with much accuracy . 

Algorithms play a significant role in this process. The raw data collected by the use of various technologies are converted into actionable decisions with the help of targeted advertising algorithms . 

AI algorithms employ advanced clustering methodologies such as k-means clustering , hierarchical clustering and Gaussian mixture models (GMM) to distill and extrapolate critical insights from extensive social listening datasets , which can encompass millions of data points in real time. These algorithms are adept at filtering through informational noise, enabling a profound comprehension of customer sentiment through granular social media sentiment analysis. . This capability allows businesses to anticipate customer behaviors and implement strategic initiatives to achieve precise outcomes .

While the increasing use of such advanced technology has enhanced digital marketing , it has significant implications beyond technical efficiency. The use of the algorithms directly affects the decision making power of the individuals , ultimately impacting the consumer autonomy and fairness which requires further examination . 

Consumer autonomy refers to the ability of the individuals to make independent and informed choices, free from external influence . Traditional advertising provides consumers with information about products and services, allowing them to make independent choices and decisions . Behavioral advertising, however, attempts to influence consumer behavior by analysing personal preferences and psychological patterns . Interest based target audiences are meticulously crafted by aggregating individuals into distinct interest groups predicated on data assimilated and inferred by platforms, encompassing user behaviour.

Another important issue relates to fairness in digital markets . Personal data is used to make consumer profiles which leads to discriminatory practices .

These concerns become more serious when the vulnerable groups such as the children or elderly people become victims of behavioral advertising.  Since these groups are less aware and informed , it becomes easy for the advertisers to target them as well as manipulate them .

Therefore, targeted behavioral advertising raises not only legal issues but also critical ethical concerns relating to consumer protection and fairness . 

A comparison with international legal developments highlights the weaknesses of the Indian legal framework . The General Data Protection Regulation (GDPR) provides a comprehensive legal framework for the protection of personal data. Unlike  the Indian legal system, the GDPR clearly requires informed and specific consent before personal data can be collected . 

GDPR also emphasizes  transparency and accountability. Companies are required to inform the users how their data will be used and  must also provide users with the option to withdraw their consent. This shows the effectiveness of the European Commission in protecting consumer privacy . 

In comparison, the Indian legal framework lacks specific statutory provisions in regulating behavioral advertising. Moreover , the process of regulation becomes more challenging due to several practical and technological limitations . 

As evident from the above discussion, technological advancements play a major role in digital marketing, leading to the widespread use of targeted behavioural advertising. The fast pace development in technology surpasses the existing legal frameworks , making regulation ineffective .

The issue of consent fatigue i.e. a situation where users are repeatedly asked to provide consent for data collection and privacy policies, further aggravates the problem. It is referred to as a psychological manipulation tactic where the users accept privacy policies out of exhaustion without fully understanding them , enabling the platforms to influence behaviour . 

In addition to this , lack of transparency makes it difficult for users to understand how their personal data is collected, analysed and used for targeted advertising . The dominance of large digital platforms also creates imbalance of power , making it harder for regulators to hold them accountable . 

These challenges clearly demonstrate the limitations of the current regulatory framework and draw attention to the urgent need for stronger legal regulation . 

In the light of the issues and challenges discussed above,  it is evident that the existing legal framework in India is not sufficient enough to deal with targeted behavioral advertising . While the constitutional recognition of privacy provides  a strong foundation , the absence of specific legislation creates significant legal  gaps. Scholars and policy reports have also emphasized the importance of adopting stronger data protection laws in India . 

A stronger legal framework should focus on three important aspects : informed consent, transparency and accountability. All these will play an important role in creating better digital markets where nobody will be exploited for the benefit of others.

Hence, it is necessary for the Indian legal system to adopt a more comprehensive approach to the regulation of behavioral advertising. Without stronger legal provisions, the rapid growth of digital markets may continue to threaten consumer privacy and consumer autonomy .

The rise of digital technologies and data-driven practices has prompted the Indian judiciary to step in and safeguard individual rights . 

In the landmark case of  Justice K.S. Puttaswamy v. Union of India, the Supreme Court of India recognized the right to privacy as a fundamental right under Article 21 of the constitution. The court defined privacy as an essential attribute of human dignity , autonomy and personal liberty. It further emphasized the importance of informational privacy and affirmed that the individuals have the right to control the collection and use of their personal data . 

In Karmanya Singh Sareen v. Union Of India , An allegation was raised related to the violation of the Right to Privacy and Personal Liberty as enshrined in the Indian Constitution by Whatsapp under its New Privacy Policy of  2016 . The users of the application claimed that the 2016 policy seeks to gather information of all Whatsapp accounts that can be utilized to access consumer accounts , finance activities and acts , and promote their services . The case was brought before the Delhi High Court and subsequently taken to the Supreme Court of India through a Special Leave Petition (SLP) . Although the matter is still under consideration , it highlights serious concerns regarding data sharing practices without valid consent of the users . 

The Supreme Court’s judgement in People’s Union for Civil Liberties (PUCL) v. Union of India  sets a foundational precedent establishing the right to privacy against unauthorized surveillance and data interception . While the case specifically addresses telephone tapping by the government authorities , its principles laid down are equally applicable to the regulation of online data and digital surveillance. 

Thus , the judiciary has played an important role in protecting the individuals against misuse of their personal data . However , the absence of particular legal provisions on targeted behavioural advertising indicates the need for more stronger and comprehensive legal regulation as analysed in the preceding section.  

The analysis of targeted behavioral advertising in the Indian context shows that the advancement in digital marketing has made it difficult to protect the personal data and privacy of the consumer . Right to privacy , although being a constitutional right, lacks practical implementation in the field of digital  advertising .

One of the major weaknesses of the current legal framework is its fragmented nature. Several provisions related to data security, liability for data breaches, and misleading advertisements have been enacted but none of these directly deals with commercial use of data for behavioral advertising . This has encouraged the digital platforms to openly analyze user data without being subject to clear legal restrictions , weakening the protection of consumer autonomy in the digital marketplace . 

The comparative analysis with the GDPR demonstrates that it is possible to regulate targeted advertising without restricting technological innovation . 

Therefore , in the light of the above discussion, it is clear that there is an urgent need for a more coherent legal framework that specifically deals with this core issue. Stronger rules relating to informed consent , transparency and accountability  are necessary to help the consumers escape from the trap of behavioral manipulation . In addition to this , strict laws should be made to protect the vulnerable groups , such as children and elderly people , from the personalized marketing strategies .  

Overall, the digital regulatory framework in India needs a reform where consumer privacy and targeted behavioral advertising can coexist, provided that the legal safeguards are in place . 

This paper  has critically examined the current framework governing Targeted Behavioral Advertising and its implications on user privacy, consumer autonomy and market fairness. The analysis reveals that while behavioral advertising offers significant benefits to businesses in terms of personalized advertising and revenue generation , it raises profound legal and ethical concerns . 

From a legal standpoint, the research highlights the gaps between domestic and international regulations. While the international framework supports user – friendly provisions, the Indian data protection laws throw the users into a state of uncertainty and vulnerability. The enforcement mechanisms are limited and there is insufficient clarity on consent, data collection and user rights in the context of targeted behavioral advertising .  

Thus, it may be concluded that while targeted behavioral advertising is a powerful tool for targeted marketing, its unregulated or inadequate deployment threatens fundamental privacy rights and consumer trust. Policymakers, advertisers and technology providers must collaborate to establish enforceable standards to protect innocent users . It is possible to reconcile commercial objectives with ethical data practices by focusing on accountability and awareness. It will ensure that digital advertising evolves in a manner that respects individual autonomy and promotes fairness. The research recommends continuous monitoring of such practices and legislatives updates to safeguard privacy in this era of technological advancements.

1. Avani Verma , “Targeted Advertising : Ethical or Unethical ? A Content Analysis of Various Media Outlets and Users.” 6(2) IJLMH 19-32 (2023)

2. Giovanni Sartor , Francesca Lagioia , Federico Galli , “ Regulating targeted and behavioral advertising in digital services : how to ensure user’s informed consent” Policy Department for Citizen’s Rights and Constitutional Affairs , European Parliament (2021)

3. Satyakam Sahoo , “ The Role of Artificial Intelligence in Targeted Advertising and Analysis of Consumer Behavior ’’ 09  IJLEMR 01-08 (2024)

4. Pietra Quinelato , “ Consumer manipulation through behavioral advertising : regulatory proposal by the Digital Services Act ” 2(1) BJLTI 1-24 (2024)