The Privacy Paradox: How WhatsApp’s Encryption and India’s Surveillance State Collide over User Rights Author Digital Privacy, WhatsApp, End-to-End Encryption, State Surveillance, Data Protection, User Rights, Cyber Law. The growing dependence on encrypted messaging platforms has created a complex tension between individual privacy, state surveillance, and digital security in India. This paper examines that tension through the example of WhatsApp, focusing on how end-to-end encryption protects message content while metadata, cloud backups, business interfaces, and device-level vulnerabilities may still expose users to monitoring. The study analyses India’s legal and constitutional framework, including Section 69 of the Information Technology Act, the Information Technology Intermediary Rules, the Digital Personal Data Protection Act, 2023, and the privacy principles recognised in the Puttaswamy judgment. It also considers the implications of traceability demands, data retention, consent practices, surveillance technologies, and government access requests. A comparative perspective is used to contrast Indian safeguards with privacy and oversight mechanisms associated with the European Union and the United States. The paper argues that strong encryption alone cannot guarantee meaningful privacy unless it is supported by judicial oversight, transparency, proportionality, effective remedies, and accountable data-governance practices. It therefore proposes a rights-based framework centred on judicial authorisation, transparency reporting, independent oversight, stronger consent protections, secure backups, and narrowly tailored traceability rules for protecting user rights in the digital environment, while preserving legitimate objectives of security and public order. International Journal of Law, Human Rights and Social Sciences Research 2026-06-30 Text application/pdf 10.65919/ijlhssr.2026.v2i2001 en