India's Digital Personal Data Protection (DPDP) Act, 2023, faces a significant legal challenge over concerns that stronger privacy protections could undermine press freedom, investigative journalism, and government transparency.
The Digital News Publishers Association (DNPA), representing 21 media organisations, has approached the Supreme Court, questioning provisions of the Act and its accompanying rules.
The Supreme Court issued notice to the Centre on October 27, scheduling further proceedings for November 17. The challenge raises fundamental questions about balancing individual privacy with the public's right to information.
The DPDP framework aims to protect personal information through consent requirements, security safeguards, breach notifications, and accountability measures. Organisations failing to implement reasonable security safeguards face penalties reaching â‚ą250 crore.
However, publishers argue that the absence of explicit exemptions for journalism could obstruct investigations involving corruption, financial irregularities, and public officials. Obtaining consent before investigating individuals could compromise reporting.
Another concern involves data-erasure provisions. Media organisations fear these could be invoked to pressure publishers into removing legitimate reports or modifying historical news archives.
Section 36, empowering the government to seek specified information, has raised concerns about protecting confidential journalistic sources. Publishers also question provisions permitting restrictions on access to information.
The amendment to the Right to Information Act is equally contentious. Critics argue that broader exemptions for personal information could weaken transparency and public-interest disclosures.
Questions also surround the independence of the Data Protection Board, particularly the government's role in appointing members responsible for adjudicating privacy-related disputes.
The government maintains that the legislation protects citizens' privacy without restricting journalism. IT Minister Ashwini Vaishnaw has reiterated constitutional protections for press freedom, while officials have indicated openness to amendments.
The central challenge is achieving privacy without compromising accountability. As India's DPDP obligations approach implementation in May 2027, policymakers must establish safeguards protecting personal data, independent journalism, public-interest reporting, and democratic transparency.
