Is the DPDP Act Quietly Killing the RTI Act? The Supreme Court Wants to Know

# Is the DPDP Act Quietly Killing the RTI Act? The Supreme Court Wants to Know

Why in News

The Supreme Court has agreed to examine whether the Digital Personal Data Protection (DPDP) Act, 2023 is being used to cripple the Right to Information (RTI) Act by classifying all data as "personal" and, in the process, gagging investigative journalists. A Bench that included Justice Joymalya Bagchi is hearing a batch of petitions challenging Section 44(3) of the DPDP Act, which amended Section 8(1)(j) of the RTI Act — a provision at the very heart of how much government information ordinary citizens can actually access.

Background: Two Rights, One Collision Course

The RTI Act, 2005 was built on a simple presumption: government-held information belongs to the public, and exemptions from disclosure should be narrow and justified. Section 8(1)(j) of the original Act reflected this balance carefully. It allowed authorities to withhold personal information that had no relationship to any public activity or interest, or whose disclosure would cause an unwarranted invasion of privacy — but crucially, it also said this exemption could not apply if the Central or State Public Information Officer was satisfied that larger public interest justified disclosure. In other words, privacy was a factor to be weighed, not an automatic trump card.

The DPDP Act, 2023 arrived nearly two decades later with a very different starting premise: personal data processing requires the consent of the "data principal" (the individual concerned), and that individual holds rights including correction and erasure of their data. Section 44(3) of this Act quietly rewrote Section 8(1)(j) of the RTI Act, and petitioners argue the rewrite did something significant — it replaced the case-by-case, public-interest-weighted exemption with what they describe as a blanket, "en bloc" embargo on disclosing anything classifiable as personal data, regardless of whether disclosure would actually serve the public interest.

What the Court Is Being Asked to Decide

The Supreme Court's own observations during the hearing captured the conceptual mismatch at the centre of this case. The RTI Act, the Bench noted, operates on a "much larger domain" than the DPDP Act — it covers information in every format, physical files, registers, digital records, anything a public authority holds. The DPDP Act, by contrast, was designed to govern data specifically in digital form. The petitioners' argument is that using a narrower, digital-data-focused law to override a broader, format-neutral transparency law, without Parliament clearly intending that consequence, distorts the RTI framework in ways its original architecture never contemplated.

A second, equally serious strand of the case concerns investigative journalism. Petitioners argued that if the DPDP Act's consent and erasure framework applies to journalistic work involving personal information about public figures or matters of public concern, reporters could effectively need the cooperation of the very people they are investigating — and those people could subsequently demand erasure of data central to a published or ongoing investigation. The Court pushed back on treating journalists as a "special category" entitled to unrestricted access, but it equally signalled that the RTI Act was never intended as a blanket privacy exemption either. The unresolved question is where, precisely, the line sits.

Exam Relevance Highlights

For Prelims: Know the precise legislative mechanics — Section 44(3) of the DPDP Act, 2023 amended Section 8(1)(j) of the RTI Act, 2005. Also know the DPDP Act's core vocabulary: "data principal" (the individual to whom personal data relates), "data fiduciary" (the entity processing the data), and the consent-and-erasure architecture built around these terms. On the constitutional side, know that the right to privacy was read into Article 21 in K.S. Puttaswamy v. Union of India (2017), while the right to information flows from the freedom of speech and expression under Article 19(1)(a), as established well before RTI's statutory codification.

For Mains: This is a textbook GS2 essay theme on reconciling two constitutionally rooted rights that increasingly compete rather than coexist: privacy (Article 21) and transparency (Article 19(1)(a), operationalised through the RTI Act). A strong answer should avoid treating this as privacy-versus-transparency in the abstract, and instead engage with the specific mechanism at issue — whether a general data-protection statute, drafted primarily with corporate and platform data processing in mind, is a suitable instrument for narrowing a targeted transparency law, or whether that outcome requires Parliament to legislate the trade-off explicitly rather than have it arrive as a consequential amendment.

Past Related Case Studies

1. K.S. Puttaswamy v. Union of India (2017) — The nine-judge Constitution Bench that unanimously recognised privacy as a fundamental right under Article 21 is the direct constitutional ancestor of the DPDP Act itself; the 2023 legislation exists because this judgment required Parliament to eventually codify a comprehensive data-protection framework. The irony now before the Court is that the same judgment's legacy statute is being used to potentially narrow a different fundamental right — the right to know, protected under Article 19(1)(a) — raising exactly the kind of rights-in-tension question Puttaswamy itself anticipated when it held that privacy, like other fundamental rights, is not absolute and must be balanced against compelling public interests.

2. Central Public Information Officer, Supreme Court of India v. Subhash Chandra Agarwal (2019) — This Constitution Bench judgment addressed a closely related question: whether information about judges' assets, held by the Chief Justice's office, could be withheld as "personal information" exempt under Section 8(1)(j). The Court held that while the office of the Chief Justice is a public authority under RTI, personal information could still be weighed against public interest before disclosure — affirming precisely the case-by-case balancing test that petitioners now argue the DPDP amendment has eliminated. This precedent is central to the current dispute because it shows the pre-2023 approach the RTI Act took toward personal information, against which the DPDP Act's blanket approach is now being measured.

3. Girish Ramchandra Deshpande v. Central Information Commissioner (2013) — An earlier Supreme Court ruling that took an expansive view of what counts as "personal information" exempt from RTI disclosure, including details like an employee's service record and disciplinary history unless clear public interest was shown. This case is often read as the origin of a more restrictive judicial approach to personal-information disclosure under RTI, one that critics argue the DPDP Act's amendment has now hardened into an even more rigid, non-discretionary bar — turning what was once a judicially calibrated standard into a legislatively fixed one.

Way Forward

A workable resolution likely requires the Supreme Court, or eventually Parliament, to explicitly preserve the public-interest override that Section 8(1)(j) originally contained, rather than treating "personal data" as an automatic disqualifier for disclosure regardless of context. One practical approach would be reading down Section 44(3) to apply narrowly to data genuinely unconnected to any public activity or accountability question, while leaving intact RTI's traditional balancing test for information bearing on the conduct of public officials, spending of public funds, or matters of demonstrable public concern — the exact categories investigative journalism and citizen oversight depend on. Absent such calibration, transparency advocates warn that the RTI Act's two-decade record as one of India's most consequential accountability tools risks being hollowed out through a data-protection statute never explicitly designed, or debated in Parliament, as an instrument for narrowing government transparency.

Conclusion

What makes this case significant is not that privacy and transparency are in tension — that tension is old and well understood in Indian constitutional law. What makes it significant is the mechanism: a data-protection law aimed primarily at regulating how companies and platforms handle personal data has, through a single amending clause, reshaped the terms on which citizens can hold their government accountable. How the Supreme Court resolves this will determine whether India's transparency architecture, built carefully over two decades through RTI Act litigation and Central Information Commission practice, survives its collision with the digital-era privacy framework largely intact — or whether it now operates under a fundamentally narrower default.