Open to investigation: On the challenge to the Digital Personal Data Protection Act, 2023

The conflict highlights the delicate balance between the fundamental right to privacy under Article 21 (established in the Puttaswamy Judgement) and the freedom of speech and expression under Article 19(1)(a), which implicitly includes press freedom. The DPDP Act aims to protect personal data by imposing stringent obligations on data fiduciaries (entities determining the purpose and means of data processing). However, by failing to include a specific journalistic exemption—present in earlier drafts—the Act requires journalists to seek consent from subjects before processing their data, potentially creating a chilling effect on investigative reporting. The Supreme Court will have to determine whether this omission constitutes an unreasonable restriction on the press. UPSC can ask candidates to analyze the tension between data privacy and press freedom, and whether the DPDP Act strikes the right balance in a democracy.

The editorial raises critical concerns about the amendment to the Right to Information Act, 2005 via Section 44(3) of the DPDP Act. Previously, Section 8(1)(j) of the RTI Act exempted personal information from disclosure unless a larger public interest justified it. The amendment removes this public-interest qualification, making the protection of personal information absolute. This shift significantly impacts transparency and accountability in governance, as investigative journalism often relies on access to official records, asset disclosures, and tender documents containing personal data to expose corruption. The challenge for policymakers is to construct a framework where public functionaries handling public funds remain subject to scrutiny without violating legitimate privacy concerns. In Mains, expect questions on how the DPDP Act impacts the RTI framework and the broader implications for transparency in public administration.

The issue extends beyond legacy media to the evolving landscape of news consumption. The editorial notes the rise of independent content creators and the increasing reliance on social media as a primary news source, particularly among younger demographics. This makes defining 'journalistic activity' and determining who qualifies for potential exemptions complex. A rigid legal definition might exclude independent journalists or citizen reporters, while an overly broad definition could create loopholes for data misuse. This situation underscores the challenge of adapting regulatory frameworks to the realities of the digital age, where traditional boundaries of journalism are blurred. The government's indication of dialogue with editors suggests an effort towards a consensus-based approach, which is crucial for drafting regulations that protect privacy without stifling the flow of information vital for a vibrant public sphere.