Data Privacy in Islam: Amanah, Tajassus & Surveillance

Modern privacy law is roughly fifty years old. The GDPR came into force in 2018. California’s privacy act followed in 2020.

Islamic law has carried a direct, unqualified prohibition on spying for fourteen centuries — and it is stated more starkly than anything in the modern statutes:

وَلَا تَجَسَّسُوا — “and do not spy.”

Not do not spy without a warrant. Not do not spy disproportionately. The command is flat, and it sits inside a verse that also forbids suspicion and backbiting — placing surveillance alongside slander as a violation of another person’s standing.

That is a striking place for a legal tradition to begin, and it produces a framework that is in some ways more demanding than contemporary data protection law, and in one specific respect sharper: Islamic law regulates not only the collection of information but the act of inferring from it.

This article sets out that framework, its scriptural basis, and — importantly — its limits, because the prohibition on spying has never meant that no wrongdoing may ever be investigated. Every source is linked.

Quick Answer

Spying is explicitly prohibited in the Qur’an. Al-Hujurat 49:12 commands wa lā tajassasū — “do not spy” — alongside prohibitions on suspicion (ẓann) and backbiting (ghībah).
Privacy operates through permission, not secrecy. An-Nur 24:27 forbids entering another’s home until you have asked leave. The default is no access, and consent is what changes it.
Data held about others is an amānah — a trust. An-Nisa 4:58 commands that trusts be rendered to those they belong to; al-Anfal 8:27 forbids betraying them.
Acting on inference without knowledge is separately forbidden. Al-Isra 17:36 — “do not pursue what you have no knowledge of” — bears directly on profiling and predictive scoring.
Concealing another’s faults is a positive duty. The Prophet ﷺ said that whoever conceals a Muslim’s fault, “Allah would conceal his faults in the world and in the Hereafter” (Sahih Muslim 2699a).
The prohibition has a defined limit. It bars seeking out the hidden, not responding to the manifest. Ibn Mas’ud: “We have been prohibited to seek out faults. If anything becomes manifest to us, we shall seize it” (Sunan Abi Dawud 4890).

The Core Prohibition: Lā Tajassasū

The foundational text is a single verse, and its structure repays close reading:

يَا أَيُّهَا الَّذِينَ آمَنُوا اجْتَنِبُوا كَثِيرًا مِّنَ الظَّنِّ إِنَّ بَعْضَ الظَّنِّ إِثْمٌ ۖ وَلَا تَجَسَّسُوا وَلَا يَغْتَب بَّعْضُكُم بَعْضًا

“O believers! Avoid many suspicions, ˹for˺ indeed, some suspicions are sinful. And do not spy, nor backbite one another.” — al-Hujurat 49:12

Three prohibitions arrive in sequence, and the sequence is the argument:

Suspicion (ẓann) — forming a negative belief about someone without proof.
Spying (tajassus) — going looking for evidence to confirm it.
Backbiting (ghībah) — telling others what you found.

That is a causal chain, not a list. Suspicion generates the motive to investigate; investigation produces material; the material gets shared. The verse intercepts the process at every stage — and the middle stage, tajassus, is precisely where surveillance technology operates.

It is worth noting what the verse does not say. It does not prohibit spying because the information might be false. The next clause makes the actual objection vivid: doing this to your brother is likened to eating his flesh. The wrong is to the person, not to the accuracy of the record.

Privacy as Permission, Not Secrecy

A common misreading is that Islamic privacy protects only what you have successfully hidden. The Qur’an frames it differently — as a standing right that others must actively seek permission to cross:

يَا أَيُّهَا الَّذِينَ آمَنُوا لَا تَدْخُلُوا بُيُوتًا غَيْرَ بُيُوتِكُمْ حَتَّىٰ تَسْتَأْنِسُوا وَتُسَلِّمُوا عَلَىٰ أَهْلِهَا

“O believers! Do not enter any house other than your own until you have asked for permission and greeted its occupants.” — an-Nur 24:27

This is istiʾdhān — the law of seeking leave. Its logic is that access is denied by default and permission is what changes the ruling. You do not have to lock your door to acquire the right; the right exists and the door is incidental.

Anyone who has worked in data protection will recognise the structure. This is opt-in — consent as a precondition of access rather than an objection raised afterwards. It arrived roughly fourteen centuries before the regulators did.

The Prophet ﷺ extended the principle to sight as well as entry. In the chapter on seeking permission, the classical jurists derived from the isti’dhān verses that the reason for asking leave is what the eye might fall upon — which is why the rules attach to looking through gaps and openings, not only to walking through doorways.

Applied to software, the question becomes uncomfortably direct: a consent banner designed so that people click through it without reading has not obtained permission. It has manufactured the appearance of permission. Under istiʾdhān, that is closer to entering the house while announcing that you did.

The Limit: Manifest Versus Hidden

This is the part most articles on Islamic privacy omit, and omitting it makes the framework look naive. The prohibition on tajassus does not abolish accountability. It draws a line at a specific place: between what is manifest (ẓāhir) and what is concealed.

The clearest statement comes from a Companion, in a case where the evidence was about as strong as evidence gets:

A man was brought to Ibn Mas’ud. He was told: This is so and so, and wine was dropping from his beard. Abdullah thereupon said: “We have been prohibited to seek out (faults). If anything becomes manifest to us, we shall seize it.” — Sunan Abi Dawud 4890 (graded sahih in chain by al-Albani)

Wine visibly dripping from the man’s beard, and the answer is still: we do not investigate. Had he done it in the street, it would be actionable. What happened behind his door is not.

The Prophet ﷺ gave the reason directly:

“If you search for the faults of the people, you will corrupt them, or will nearly corrupt them.” — Sunan Abi Dawud 4888 (graded sahih by al-Albani), narrated by Mu’awiyah, in the chapter “Regarding spying”

Afsadtahum — you will corrupt them. The claim is empirical, not merely moral: a society that hunts for private failings does not become more virtuous. It becomes worse. Anyone who has watched an online pile-on assembled from someone’s decade-old posts has seen the mechanism.

Al-Ghazali built this into his treatment of ḥisbah in the Iḥyāʾ: the duty to forbid wrong operates on what is openly manifest, and does not license investigation into what a person has concealed behind a closed door.

So the boundary is:

Permitted	Prohibited
Responding to what is openly done	Seeking out what is concealed
Investigating a specific, credible, serious harm	Generalised monitoring “in case”
Acting on evidence that came to you	Manufacturing access to obtain evidence

This is the same distinction modern law reaches for with particularised suspicion versus bulk collection — and Islamic law lands on the same side, several centuries earlier.

Satr: The Duty to Conceal

Islamic ethics does not stop at “do not look.” It attaches reward to actively covering what you already know:

“…and he who conceals (the faults) of a Muslim, Allah would conceal his faults in the world and in the Hereafter.” — Sahih Muslim 2699a

This is satr, and it inverts an entire business model. The economics of much of the modern internet run on the opposite instinct: aggregate what people would rather not have known, then find someone who will pay for it. Data brokers, people-search sites, breach-aggregation services and engagement-optimised outrage all operate by unconcealing.

The Qur’an also addresses the appetite that makes such products profitable:

إِنَّ الَّذِينَ يُحِبُّونَ أَن تَشِيعَ الْفَاحِشَةُ فِي الَّذِينَ آمَنُوا لَهُمْ عَذَابٌ أَلِيمٌ فِي الدُّنْيَا وَالْآخِرَةِ

“Indeed, those who love to see indecency spread among the believers will suffer a painful punishment in this life and the Hereafter.” — an-Nur 24:19

Note the object of the censure: not those who commit the act, and not even those who spread it — those who love that it spread. The verse reaches the appetite itself, which is the thing recommendation systems are built to detect and feed.

Data as Amānah

The strongest available framing for what a company holds when it holds your data is amānah — a trust placed in someone’s hands that is not theirs.

إِنَّ اللَّهَ يَأْمُرُكُمْ أَن تُؤَدُّوا الْأَمَانَاتِ إِلَىٰ أَهْلِهَا

“Indeed, Allah commands you to return trusts to their rightful owners.” — an-Nisa 4:58

يَا أَيُّهَا الَّذِينَ آمَنُوا لَا تَخُونُوا اللَّهَ وَالرَّسُولَ وَتَخُونُوا أَمَانَاتِكُمْ وَأَنتُمْ تَعْلَمُونَ

“O believers! Do not betray Allah and the Messenger, nor betray your trusts knowingly.” — al-Anfal 8:27

Two things follow that ordinary “data ownership” language does not capture.

First, the trustee acquires no ownership. An amānah remains the property of the one who entrusted it. A platform holding your messages holds them the way a friend holds your keys — possession without title. “We own the data you upload” is, in these terms, a category error dressed as a contract.

Second, betrayal is defined by the trustee’s conduct, not the outcome. 8:27 prohibits betraying a trust “knowingly” — the wrong is complete at the act of misuse, whether or not anyone is visibly harmed. A company that quietly repurposes data for something the user did not agree to has breached the amānah even if the breach never surfaces and no one complains.

And the weight of amānah is not small. The Qur’an describes it as a burden the created order itself declined:

إِنَّا عَرَضْنَا الْأَمَانَةَ عَلَى السَّمَاوَاتِ وَالْأَرْضِ وَالْجِبَالِ فَأَبَيْنَ أَن يَحْمِلْنَهَا وَأَشْفَقْنَ مِنْهَا وَحَمَلَهَا الْإِنسَانُ

“Indeed, We offered the trust to the heavens and the earth and the mountains, but they ˹all˺ declined to bear it, being fearful of it. But humanity assumed it.” — al-Ahzab 33:72

The Sharpest Verse: Inference Without Knowledge

If one verse deserves to be central in Islamic AI and data ethics and is almost never cited there, it is this one:

وَلَا تَقْفُ مَا لَيْسَ لَكَ بِهِ عِلْمٌ ۚ إِنَّ السَّمْعَ وَالْبَصَرَ وَالْفُؤَادَ كُلُّ أُولَٰئِكَ كَانَ عَنْهُ مَسْئُولًا

“Do not follow what you have no ˹sure˺ knowledge of. Indeed, all will be called to account for ˹their˺ hearing, sight, and intellect.” — al-Isra 17:36

Lā taqfu means do not track, trail or pursue something. The prohibition is on acting upon what you do not actually know — and the verse then names the three faculties that will be questioned: hearing, sight, and the fuʾād, the reasoning heart.

Hearing, sight, and inference. That is a remarkably precise description of a modern data pipeline: audio capture, visual capture, and a model that draws conclusions from both. And the verse’s claim is that each is separately accountable.

This matters because most privacy harm today is not caused by collection. It is caused by inference. A retailer deducing a pregnancy from shopping patterns, a lender inferring risk from a postcode, an insurer scoring health from browsing history, an employer predicting who will resign — none of these require reading anything private. They require guessing well.

Modern privacy law struggles here, because inference is not obviously “collection.” Al-Isra 17:36 does not struggle, because it never regulated collection in the first place. It regulated acting on what you merely think you know, which is exactly what a probabilistic score is.

Read alongside 49:12, the two verses close the circle: ẓann forbids the unfounded belief, tajassus forbids the search for material, and lā taqfu forbids acting on the resulting inference.

Eavesdropping and Always-On Devices

One hadith addresses listening specifically, and its severity is arresting:

“…and if somebody listens to the talk of some people who do not like him (to listen) or they run away from him, then molten lead will be poured into his ears on the Day of Resurrection.” — Sahih al-Bukhari 7042

The operative condition is wa hum lahu kārihūn — while they dislike it. Not while it is secret; while it is unwanted. Consent, again, is the hinge.

This bears on a category of device that did not exist when the ruling was formulated but fits it exactly: smart speakers, always-on assistants, ambient microphones, “quality assurance” call recording, and workplace monitoring software. The relevant question is not whether the device is technically disclosed in a policy document. It is whether the people being heard would object if they understood.

Where This Lands on Modern Practice

Practice	Principle engaged	Assessment
Reading a partner’s or child’s phone without their knowledge	tajassus, istiʾdhān	Prohibited as a routine practice; a narrow exception for specific, serious, credible harm is discussed by scholars — not general monitoring
Bulk data collection “in case it’s useful later”	tajassus, amānah	Fails both — collection without purpose is the definition of seeking out
Behavioural profiling and predictive scoring	17:36, ẓann	Directly engaged; acting on inference is separately accountable
Selling or brokering personal data	amānah, satr	Betrayal of a trust, and the inverse of the duty to conceal
Publishing leaked private material	ghībah, 24:19	Prohibited even where the material is true
Investigating a specific, credible, serious harm	Ibn Mas’ud, ḥisbah	Permitted within its limits — this is the exception the tradition preserves
Responding to what someone does openly	manifest vs hidden	Permitted
Consent banners engineered to be clicked past	istiʾdhān	The form of permission without its substance

For Muslim Developers and Companies

If you build software, the framework produces obligations that are more specific than “be ethical”:

Collect for a stated purpose, or do not collect. Speculative retention is tajassus with a database attached.
Treat consent as real permission. If your flow is designed so users click through without understanding, you have engineered the appearance of istiʾdhān, not the thing itself.
Audit your inferences, not just your fields. You are accountable for what your model concludes, not only for what your form asks. This is the 17:36 obligation and it is the one most often missed.
Do not build un-concealment as a product. Aggregation of what people would rather not have known is the opposite of satr.
Minimise, then delete. An amānah you no longer need is one you should no longer hold.
Secure it as someone else’s property, because it is. A breach is not only a technical failure; under 8:27 it is a failure of a trust you accepted.

For Individuals

The same texts cut towards the reader, not only towards corporations — and this is the harder application:

Do not read other people’s messages. Not a spouse’s, not an adult child’s, not a colleague’s. The prohibition is not suspended by relationship.
Do not screenshot and forward. A private message repeated to others engages ghībah regardless of accuracy.
Do not go looking. Searching someone’s history to confirm a suspicion is the exact sequence 49:12 prohibits.
Conceal what you come to know. Satr is a duty, not a courtesy.
Guard what you disclose about yourself. The scholars treat self-exposure of one’s own sins as a separate matter — the tradition’s emphasis on concealment applies to oneself as well.

What Remains Open

Honesty requires flagging where the tradition does not hand down a finished answer.

Parental monitoring of children is genuinely contested. Scholars weigh the guardian’s duty of protection against the child’s dignity, and answers vary with age, specificity of concern and proportionality. There is no single ruling to quote.

State surveillance is likewise unsettled. The classical discussion of ḥisbah limits investigation to manifest wrongdoing, but contemporary scholars differ on how far the doctrine of necessity (ḍarūrah) extends to counter-terrorism and public safety.

Anonymised and aggregate data has no classical analogue at all. Whether statistical processing of de-identified data engages tajassus is an open question, complicated by the fact that re-identification is often possible.

Consent given under practical compulsion — where refusing means losing access to employment, education or banking — raises the classical question of whether consent extracted under necessity is valid consent.

These require a qualified scholar applying the principles to specific facts. This article sets out the principles; it does not resolve their hardest applications.

A Closing Thought

The most striking feature of the Islamic treatment of privacy is why it prohibits surveillance.

It is not primarily to prevent errors, or to protect the innocent, or to constrain state power — the standard modern justifications. Abu Dawud 4888 gives a different reason: a society that searches for faults corrupts itself. The harm is not to accuracy or to liberty. It is to the moral condition of the watchers, and to the possibility of a community in which people can repent privately and be covered rather than catalogued.

There is a reason the reward for concealing another’s fault is stated as Allah concealing yours. The tradition assumes you will need it.

Learning the Qur’an properly means learning what verses like 49:12 and 17:36 actually say, in the language they were revealed in. Al-Ilm Academy offers one-to-one Quran and Tajweed classes with qualified teachers, and the first trial class is free.

See also: AI and Islam: What Islamic Ethics Says About Artificial Intelligence, which covers the 2025 Islamic Fiqh Academy resolution on AI.

Frequently Asked Questions

Is spying haram in Islam? Yes. Al-Hujurat 49:12 states wa lā tajassasū — “and do not spy” — as a direct prohibition, placed between prohibitions on unfounded suspicion and backbiting. The Prophet ﷺ also warned that searching for people’s faults corrupts them (Sunan Abi Dawud 4888, sahih).

What does tajassus mean? Tajassus (تجسّس) means actively seeking out concealed information about others — investigating, prying, searching for what a person has not made public. It is distinguished from responding to what someone does openly, which remains permitted.

Is it haram to check my spouse’s or child’s phone? Reading a spouse’s private messages without permission engages the prohibition on tajassus and is prohibited as a routine practice. Parental monitoring of minors is genuinely contested among scholars, who weigh the duty of protection against dignity and proportionality, and answers vary with the child’s age and the specificity of the concern. Consult a qualified scholar for your situation rather than relying on a general article.

Does Islam allow any surveillance at all? Yes, within limits. The prohibition targets seeking out the concealed, not responding to the manifest. Ibn Mas’ud stated the rule: “We have been prohibited to seek out faults. If anything becomes manifest to us, we shall seize it” (Sunan Abi Dawud 4890). Investigating a specific, credible, serious harm differs from generalised monitoring.

What is amanah in the context of data? Amānah means a trust held on another’s behalf. Data about a person held by a company is that person’s, not the company’s — an amānah that must be safeguarded and not betrayed (an-Nisa 4:58, al-Anfal 8:27). The trustee gains custody, not ownership.

Is targeted advertising haram in Islam? There is no single ruling, and it depends on how the targeting works. Advertising based on information a person knowingly provided differs from advertising built on covert tracking and inference. The latter engages both tajassus and the prohibition in al-Isra 17:36 on acting upon what you do not truly know. A qualified scholar should assess a specific implementation.

Does Islamic privacy only protect what you have hidden? No. An-Nur 24:27 establishes permission-seeking (istiʾdhān) as the default: access must be requested before it is taken. The right does not depend on having successfully concealed something — it exists, and consent is what lifts it.

Sources

Quranic passages: 4:58 · 8:27 · 17:36 · 24:19 · 24:27 · 33:72 · 49:12
Sahih al-Bukhari 7042 — eavesdropping on those who dislike it
Sahih Muslim 2699a — concealing a Muslim’s faults
Sunan Abi Dawud 4888 — searching for faults corrupts people (sahih, al-Albani)
Sunan Abi Dawud 4890 — Ibn Mas’ud on manifest versus concealed (sahih in chain, al-Albani)
Al-Ghazali, Iḥyāʾ ʿUlūm al-Dīn, on the limits of ḥisbah

Data Privacy in Islam: Amanah, Tajassus and the Ethics of Surveillance