The Supreme Court’s privacy judgment has important implications for the right to health, especially the protection of health information. The standards that laws will have to meet to impose restrictions on such protection are examined. In this context, the HIV/AIDS Act, 2017, the implications of a data protection law for health, and the unconstitutionality of mandatorily requiring Aadhaar to obtain treatment for HIV/AIDS and tuberculosis are discussed.