DPDP Law Challenge: Privacy, Press Freedom and the Right to Information

What is being challenged?

The Digital News Publishers Association has challenged specific provisions of the DPDP Act and Rules. Its central contention is that the absence of an express exemption for journalistic activity subjects constitutionally protected reporting to a data-processing regime that may obstruct investigation and publication.

According to the petition as reported, notice, prior-consent, erasure and verifiable-consent requirements could affect publishers, editors, reporters, citizen journalists, whistleblowers and RTI activists. These are allegations about the framework’s constitutional effects, not findings already made by the Supreme Court.

The source reports that implementation was announced in 2025, but does not establish the commencement status of every challenged provision. Announcement, notification and the legal operation of individual provisions should not be treated as interchangeable.

• The challenge concerns both journalistic processing of personal data and access to information necessary for reporting.
• The petition invokes Articles 14 and 19(1)(a), alongside the constitutional principles governing privacy.
• The key question is not whether journalism should respect privacy, but whether general data-protection duties require tailored public-interest safeguards.

Constitutional balance: privacy and speech are mutually reinforcing rights

Privacy protects dignity, autonomy and individuals against intrusive exposure. Press freedom enables scrutiny of public power and dissemination of information necessary for democratic participation. Neither right automatically overrides the other: indiscriminate publication can violate privacy, while indiscriminate secrecy can shield wrongdoing.

A speech restriction must satisfy Article 19(2), including its permitted grounds and the requirement of reasonableness. Privacy is not separately enumerated as a ground in Article 19(2); therefore, invoking privacy cannot by itself dispense with constitutional scrutiny of restrictions on expression.

Proportionality requires examination of the legitimate objective, the connection between the measure and that objective, whether less restrictive alternatives exist, and whether the burden imposed is excessive. Article 14 additionally permits scrutiny of arbitrariness and whether the regulatory design adequately recognises constitutionally relevant differences.

• Protecting personal data is a legitimate objective, but the means chosen must remain constitutionally defensible.
• Reporting on official conduct may carry a stronger public-interest justification than exposure of unrelated intimate details.
• Public officials retain privacy rights; public office does not make every aspect of private life open to disclosure.

Consent, erasure and source confidentiality

Where a report concerns alleged wrongdoing by an identifiable person, requiring that person’s prior consent could undermine the investigation itself. Advance notice can also create risks of evidence destruction or pressure on sources. However, these concerns do not establish that every journalistic use of personal data is exempt from all duties or that every processing activity necessarily requires consent under the Act.

The petition challenges Section 36, read with Rule 23 and the Seventh Schedule, alleging overly broad Central government authority to requisition information from data fiduciaries or intermediaries. It argues that insufficient oversight, necessity requirements and procedural safeguards could enable identification and targeting of journalistic sources.

Source confidentiality sustains whistleblowing and investigative reporting. A defensible legal framework should distinguish narrowly justified demands for information from indiscriminate access, while providing independent scrutiny and an effective opportunity to challenge intrusive demands.

• Public-interest reporting should not depend on a suspected wrongdoer’s permission.
• Erasure requests require safeguards against suppression of accurate accountability records.
• Journalistic protection should not become immunity for commercial profiling, doxxing or gratuitous disclosure.
• Independent oversight should protect sources without assuming that confidentiality is an absolute legal privilege.

The RTI amendment: exemption is not the entire legal framework

The report identifies Section 44(3) of the DPDP Act, which amends Section 8(1)(j) of the RTI Act concerning personal information. The petition’s concern is that a broader personal-information exemption could obstruct scrutiny of public offices and weaken investigative journalism.

The reported claim that this creates an absolute bar must be distinguished from the wider statutory position. Section 8(2) of the RTI Act provides a public-interest override where the public interest in disclosure outweighs the harm to protected interests. Section 10 also permits disclosure of severable, non-exempt portions of records.

Accordingly, a sound analysis must examine the amended exemption together with the public-interest override, severability and the commencement of the relevant amendment. A record containing personal information is not analytically equivalent to a record whose every part must remain undisclosed.

• Privacy-sensitive details can be redacted while accountability-related information is disclosed.
• Information about the discharge of public duties should be assessed for its public-interest value.
• Reasoned decisions and effective appeals are essential to prevent mechanical reliance on privacy exemptions.

Designing a qualified safeguard for public-interest journalism

A proportionate framework could provide a qualified journalistic safeguard based on purpose, necessity and public interest rather than a blanket exemption for all media organisations. Protection should attach to genuine journalistic activity, including relevant citizen reporting, rather than depend solely on institutional affiliation.

Such protection should coexist with data security, minimisation, responsible verification and safeguards for vulnerable individuals. Public interest must be distinguished from audience curiosity: disclosure should contribute to accountability, public understanding or protection against harm, rather than merely expose private lives.

• Use redaction and anonymisation where identity is unnecessary to establish the story.
• Require recorded reasons and independent review for demands capable of revealing confidential sources.
• Provide accessible remedies for unjustified privacy intrusions without enabling routine pre-publication censorship.
• Retain accurate public-interest archives while allowing correction and contextual updating where appropriate.