New privacy law will shut down newsrooms, change the concept of news: Digital News Publishers Association

This issue highlights the tension between two fundamental rights: the Right to Privacy (recognized as a fundamental right under Article 21 in the landmark Puttaswamy judgment) and the Freedom of Speech and Expression guaranteed under Article 19(1)(a), which implicitly includes freedom of the press. The DPDP Act, 2023 aims to protect citizens' personal data by establishing a framework for its lawful processing, primarily based on the consent of the Data Principal (the individual whose data is being processed). However, the DNPA argues that applying these strict consent requirements to journalism—where gathering and publishing information often involves processing personal data without explicit consent—would severely restrict investigative reporting and news dissemination. The core constitutional question for the Supreme Court of India is how to balance the individual's right to control their personal data against the public's right to information and the media's role as the 'fourth estate' in a democracy. The absence of a specific exemption for journalistic purposes in the DPDP Act, unlike in data protection laws of many other jurisdictions (like the EU's GDPR), forms the crux of the legal challenge.

The implementation of the DPDP Act, 2023 represents a significant shift in India's digital governance framework, moving towards a consent-based regime for data processing. The DNPA's petition underscores the practical challenges of applying a uniform regulatory framework across diverse sectors. For newsrooms, the requirements of notice and prior consent, compelled erasure (the right to be forgotten), and verifiable consent could create insurmountable operational hurdles. If a journalist must obtain consent before publishing a story involving personal data, it could effectively grant individuals (including public figures or those involved in controversies) a veto over news coverage, leading to a chilling effect on journalism and potentially fostering a form of self-censorship. The case emphasizes the need for nuanced policymaking that considers the specific operational realities and societal functions of different sectors. The Supreme Court of India's eventual ruling will likely shape how the Data Protection Board of India (the regulatory body established under the Act) interprets and enforces the law concerning media organizations.

The petition brings into focus the evolving nature of fundamental rights in the digital age. The Puttaswamy judgment established privacy as an intrinsic part of human dignity, but it also recognized that privacy is not an absolute right and can be restricted subject to the tests of legality, legitimate state aim, and proportionality. The DNPA contends that the DPDP Act, 2023 fails the proportionality test by imposing blanket restrictions on journalistic activities without providing carve-outs that exist in democratic societies to protect press freedom. Furthermore, the petition argues that empowering Data Principals with rights like erasure could compromise journalistic sources and whistleblowers, undermining the media's ability to act as a watchdog. This scenario forces the judiciary to define the boundaries of the Right to Privacy when it intersects with the collective right of the public to be informed, a critical component of participatory democracy. Students should analyze how this conflict might be resolved, potentially through judicial reading-down of certain provisions or by directing the executive to frame rules that explicitly protect journalistic endeavors.