Privacy and transparency: On the RTI Act amendment, petitions

The conflict centers on two fundamental rights derived from the Constitution. The Right to Information Act, 2005 is recognized as implicit in the right to freedom of speech and expression under Article 19(1)(a), crucial for informed citizenry and state accountability. Conversely, the right to privacy was affirmed as a fundamental right under Article 21 in the landmark Puttaswamy judgment. The Digital Personal Data Protection Act, 2023 amended Section 8(1)(j) of the RTI Act, replacing a nuanced exemption with a blanket ban on disclosing 'personal information.' Previously, a 'public interest override' allowed Public Information Officers to release personal data if it served a larger public good. By removing this override, the amendment creates a scenario where the state's transparency is severely curtailed under the guise of privacy protection. UPSC often tests the balance between competing fundamental rights; this issue exemplifies the challenge of harmonizing the citizen's right to know with individual privacy rights, particularly regarding public officials and government spending.

From a governance perspective, the amendment disrupts the accountability framework established by the RTI Act. The RTI Act was designed to reduce information asymmetry between the state and citizens, a critical aspect of good governance. The editorial highlights a 'legitimate uses' paradox: under Section 7 of the DPDP Act, the state can process citizen data without consent, yet citizens are now blocked from using similar principles to demand transparency from the state. This asymmetry empowers state surveillance while crippling citizen scrutiny. Furthermore, the amendment creates a chilling effect on investigative journalism. Journalists, potentially classified as 'data fiduciaries' under the DPDP Act, face massive fines (up to ₹250 crore) for non-compliance, severely hindering their ability to act as the Fourth Estate. The absence of exemptions for journalism in the Indian law, unlike the European Union's General Data Protection Regulation, raises concerns about the state's intent to control information flow and evade accountability.

The legal scrutiny by the Constitution Bench will likely focus on the definition of 'personal information' and the necessity of the 'public interest override'. The Court will revisit principles established in cases like Central Public Information Officer (2019), which held that personal information should remain private unless disclosure is necessary for the larger public interest. The removal of this override by the DPDP Act creates an absolute exemption, potentially violating the doctrine of proportionality. The Court must determine whether a blanket ban on disclosing personal information, irrespective of public interest, is a reasonable restriction on the right to information under Article 19(2). This case will set a crucial precedent on how data protection laws interact with established transparency laws, and whether statutory amendments can effectively dilute a fundamental right by removing established public interest safeguards.