Back
Journalists Challenge DPDP Act in Supreme Court, Sparking Privacy-Transparency Clash
In a bold constitutional assault on India's nascent data privacy regime, digital news platform and journalist Nitin Sethi have filed a in the , targeting core provisions of the and the . Simultaneously, the has lodged a parallel challenge, zeroing in on amendments to the . These petitions, marked as W.P.(C) No. 177/2026 and W.P.(C) No. 211/2026 respectively, allege that the DPDP framework sacrifices transparency and accountability on the altar of unchecked privacy, violating fundamental rights under of the Constitution. As legal eagles await listing and hearings, this litigation could redefine the delicate equilibrium between individual privacy and public scrutiny in the digital age.
Background: Evolution of Data Privacy and RTI in India
India's journey toward a comprehensive data protection law has been tortuous, spanning over a decade. The Supreme Court's landmark Justice K.S. Puttaswamy (Retd.) v. ( ) judgment recognized privacy as a fundamental right intrinsic to Article 21's right to life and personal liberty, catalyzing legislative action. This led to the Justice B.N. Srikrishna Committee's recommendations and successive iterations of the Personal Data Protection Bill, culminating in the DPDP Act's passage in amid hurried parliamentary proceedings.
The DPDP Act establishes obligations for (entities processing personal data) and introduces the as an adjudicatory and enforcement body. Notably notified in , the DPDP Rules, 2025 flesh out implementation details, including consent mechanisms, data breach reporting, and government oversight powers.
Parallel to this, the RTI Act, , has been a cornerstone of transparency since its enactment, empowering citizens to demand information from public authorities. Section 8(1)(j) previously permitted disclosure of personal information if it served a larger public interest or related to public activity, subject to a . The DPDP Act's amended this, reportedly creating a " ," a move petitioners decry as antithetical to accountable governance.
These petitions arrive at a juncture when digital data proliferation amplifies tensions: post-Puttaswamy, India grappled with surveillance concerns (e.g., Pegasus revelations) and RTI backlogs, making this challenge pivotal.
The Petitions: Parties, Advocates, and Scope
and Nitin Sethi v. (W.P.(C) No. 177/2026), drafted by Advocates , , , and , and filed through Advocate on Record , seeks to strike down the entire DPDP Act as unconstitutional. It specifically impugns Sections 5, 6, 8, 10, 17, 18, 19, 36, and 44(3), alongside Rules 3, 6, 7, 8, 9, 13, 16, 17, and 23 of the 2025 Rules.
The NCPRI petition (W.P.(C) No. 211/2026), spearheaded by Advocate and , mirrors this by attacking the RTI amendment under . Both suits name the and others as respondents, positioning them as fraternal challenges likely to be clubbed for hearing.
Core Grievances: RTI Amendment and the Demise of Transparency
At the heart lies the amendment to
. Petitioners argue that it
"removes the earlier
that allowed disclosure of personal information if it was related to public activity or public interest,"
instituting instead a
"
for disclosure of personal information."
Under the old regime, public interest could override privacy for disclosures tied to corruption, conflicts of interest, or public functions – tools indispensable for journalists and activists.
"The new regime effectively bars disclosure of personal information altogether, regardless of whether larger public interest justifies such disclosure,"
the plea contends.
"This... undermines citizens' right to information and transparency in public administration."
This shift, petitioners claim, tilts decisively toward privacy, hampering exposés on wrongdoing. RTI disclosures have historically fueled investigations into electoral bonds, Adani dealings, and official malfeasance; their curtailment could shield opacity.
Government Powers: Enabling Digital Surveillance?
, read with
of the Rules, empowers the Central Government to requisition information from
and intermediaries. Labeled "vague,
," these provisions allegedly authorize
"unreasonable digital searches and enable the gathering and storage of personal data without adequate safeguards, thereby violating Article 21."
The lack of notice to
(individuals) further implicates
(free speech). Petitioners invoke
: such intrusions must be
"demonstrably justified in a free and democratic society,"
a threshold unmet here. Echoing
on digital privacy, they warn of mass surveillance risks absent judicial oversight.
Data Protection Board: Independence Under Siege?
The institutional edifice fares no better. The DPB's Chairperson and members are appointed via executive-dominated Search Committee and Selection Committee processes, rendering it "susceptible to executive control." This contravenes Article 14's equality mandate, paralleling critiques in electoral bonds and ED appointment cases where judicial independence was paramount.
Petitioners seek declarations rendering impugned sections and rules "void, inoperative and unconstitutional."
Legal Arguments: A Constitutional Trifecta
The petitions weave a tapestry of violations:
- Article 14 : Overbreadth and arbitrariness in powers and appointments.
- Article 19 : on speech via undisclosed data seizures.
- Article 21 : Privacy erosions without due process, flouting Puttaswamy's (legality, necessity, ).
Precedents abound: RTI v. Privacy in upheld balancing; recent SC rebukes to UAPA vagueness reinforce precision requirements. Globally, EU's GDPR balances via public interest exceptions; India's model risks undercutting this.
Implications for Legal Practice
For practitioners, this heralds a fertile arena. Constitutional litigators may see surges in advisory on DPDP compliance amid uncertainty. Media lawyers confront narrowed defenses in defamation/sedition suits sans RTI ammunition. Corporate counsel advising fiduciaries must navigate enforcement limbo if provisions fall. Data protection specialists anticipate DPB overhaul, akin to TRAI/SEBI independence battles.
Litigation strategy tip: Amici from tech policy thinktanks could amplify, invoking Aadhaar privacy scrutiny.
Broader Impacts and Potential Outcomes
Success could restore RTI's vigor, bolstering anti-corruption ecosystems and journalistic integrity – vital in an era of deepfakes and algorithmic opacity. Failure entrenches privacy absolutism, potentially stifling accountability amid rising digital authoritarianism.
The SC, alive to tech's double-edged sword (e.g., OTT regulation stays), may craft nuanced severability, retaining viable parts while excising flaws. Interim relief on Rules enforcement looms possible.
As these writs percolate, they underscore India's data governance crossroads: Will privacy empower or enfeeble democracy? Legal professionals must monitor docket for linkage orders and urgent mentions.
In sum, these challenges transcend statutes, probing constitutional soul – where data deluge meets democratic deficit.
