Court Orders Investigation After Film Publicizes Personal Data

The intersection of creative freedom and the fundamental right to privacy has come to the fore following a recent order by a Kerala court , which has mandated a police inquiry into a distressing case of unauthorized data exposure. The case concerns an IT professional residing in Ernakulam, whose personal mobile number was featured as a plot device in a film. The resulting fallout—a deluge of offensive, sexually explicit, and intimidating calls—has sparked a significant debate within the legal community regarding the duty of care owed by production houses and the liability of streaming platforms in propagating private information.

Background: From Fiction to Harassment

The controversy centers on a film starring Kunchacko Boban, which saw a wide release in theaters followed by its digital debut on the streaming giant, Netflix , in March 2025 . In a climatic sequence of the film, a character depicted as a doctor is shown utilizing a specific phone number. Unbeknownst to the filmmakers, this number belongs to a real-life individual—an IT professional who has maintained the connection for several years.

The complainant has alleged that the number is intimately linked to his essential personal and professional infrastructure, including bank accounts, Aadhaar, PAN card, and various other critical services. The trauma began shortly after the film's release, as the visibility of the number on both the big screen and the streaming interface exposed him to a global audience. The complainant reports receiving a sheer volume of unsolicited calls and messages from numerous locations across India and abroad.

As noted in the complaint, "The nature of these calls and messages is not merely offensive but is characterised by sadistic, sexually explicit, and, at times, outright terroristic content." The consequences for the petitioner have been profound: "As a direct result, the Petitioner has been left in a state of perpetual fear, anxiety, and psychological distress." The constant influx of harassing communications, which occur at all hours, has eroded the petitioner's sense of safety and sleep, leading to a state of chronic anxiety.

The Legal Battle: A Pursuit of Accountability

Despite initial efforts to mitigate the damage by filing representations with the film’s producers and reaching out to cyber authorities, the petitioner found that the situation remained largely unaddressed. The lack of proactive response from the creators, coupled with the continued presence of the number in the streaming version of the film, left him with no choice but to petition the court.

The court's directive to register a First Information Report (FIR) and initiate a police investigation marks a pivotal step in assessing the legal liability of the production house. This is not merely a matter of a prop mistake; it is a question of whether the negligent failure to verify the authenticity of a contact number—especially one with such significant real-world connectivity—constitutes a criminal act under the relevant statutes involving privacy infringement and harassment .

Anatomy of a Privacy Breach in Media

In the modern digital age, the creation of realistic content often involves the use of "props" that mimic reality. However, the use of genuine, functional personal contact information within a work of art indicates a systemic failure in the pre-production vetting process. From a legal standpoint, the production house has a duty of care to ensure that their creative output does not infringe upon the fundamental rights of third parties.

By failing to perform a due diligence check, the production company has inadvertently exposed a private citizen to extreme psychological and social harm. The legal challenge here is threefold:

1. Negligence: Did the production and design teams owe the petitioner a duty of care in verifying that the contact details used in their fiction were non-existent or fictional?

2. Privacy Infringement : Does the unauthorized disclosure of private data in a public medium override the protection of creative freedom?

3. Intermediary Liability : Does the streaming platform ( Netflix ) hold responsibility for hosting content that contains verifiable, harmful PII , and at what point does it become an accessory to the harassment ?

Analyzing Liability and Duty of Care

Legal professionals are closely watching this case to see how the court interprets the liability of the filmmakers. In traditional tort law , the standard of care is determined by what a reasonable person in the same position would have done. In the production of a commercial film, a "reasonable" approach would inherently include the verification of all identifiers. The use of a "live" number, especially one attached to an individual’s identity as inextricably as this one, suggests a deviation from the expected standard of professional conduct.

Furthermore, the "terroristic" nature of the calls adds a layer of penal complexity. By placing the number in the public eye, have the creators created a situation that facilitates criminal harassment ? In many jurisdictions, this could be interpreted through the lens of contributory liability , where the original, albeit negligent, act allows for subsequent criminal behavior by unidentified third parties.

Impact on Legal Practice and Production Workflow

This case creates an immediate imperative for the legal departments within film and media production houses. Going forward, the legal vetting of all elements appearing in a film—from license plates and street addresses to phone numbers and social media handles—must move from a "best practice" to a mandatory compliance hurdle.

Legal teams should consider implementing:

- Identifier Clearing Processes: Mandatory digital audits of all contact information used in scripts or sets.

- Privacy Impact Assessments: A review of whether identifiable personal data is exposed during the post-production and editing phase.

- Contractual Indemnity: Clearer indemnification clauses in the contracts of production designers and set managers regarding the use of real identifiers.

For practitioners, this case highlights the need for robust advocacy for victims of digital harassment whose lives are upended by technological negligence. The difficulty the complainant faced in even getting an investigation started underscores a gap in the current framework for dealing with modern, non-traditional privacy breaches.

Broader Legal Implications

The case raises questions about the " Right to be Forgotten " and the accountability of large digital platforms. When a film is streamed on a global scale, the damage caused by a privacy breach is amplified by orders of magnitude. The court's move to push for a police investigation highlights that existing "take-down" mechanisms are often insufficient when the damage has already been done on a persistent, permanent medium.

The distinction between "fiction" and "factual negligence" is becoming blurred, and courts are likely to become increasingly intolerant of defense claims that rely on artistic intent at the expense of individual safety. As the justice system continues to address the intersection of technology and human rights, this case could well end up being a landmark precedent for the protection of personal data against the negligence of major media entities.

Conclusion

The ordeal faced by the IT professional in Ernakulam serves as a sobering reminder of the power of media and the vulnerability of the individual in the digital era. As the investigation progresses, the legal community will be looking for a resolution that not only compensates the victim for his severe distress but also establishes a firm accountability standard for the film industry. The court's order for a probe is a necessary check on an industry that, in its pursuit of realism, must remain cognizant of the real-world boundaries of privacy and legal compliance. In a society where digital identity is the cornerstone of daily existence, personal data must be held as inviolable, even in the realm of creative expression.