The Lift Line

“Stakeholders must build consensus on a mutually acceptable framework where public functionaries and those handling public funds are not insulated from scrutiny under the guise of privacy.” (Editorial, The Hindu, 30 October 2026)

Why This Editorial Matters for Your Exam

In the news: the Supreme Court on 27 October 2026 issued notice on a writ petition by the Digital News Publishers Association (DNPA) and journalist Yukta Mudgal challenging provisions of the Digital Personal Data Protection (DPDP) Act, 2023 and its Rules. The notice, and the application for stay, are returnable on 17 November; no provision has been stayed. The Hindu’s editorial “Open to investigation” argues that the law risks a chilling effect on the press.

A disclosure for readers: the DNPA represents 21 media publishers, and its members include The Hindu and The Indian Express, the two papers whose editorials this site studies. Read the editorial as the view of a party with a stake in the case.

This page covers the editorial’s argument and what the law says before and after Section 44(3). For background, earlier pieces on this site:

GS Paper 2: fundamental rights (Articles 19 and 21); transparency and accountability, the Right to Information; statutory bodies (the Data Protection Board of India); the role of the media. GS Paper 4: probity in governance, the right to information. Essay: privacy and the public’s right to know.

The Crux in 60 Words

The DPDP Act gives journalism no exemption of its own, though research and statistics have one, and it has narrowed the RTI Act’s personal-information clause. The Hindu fears reporters may have to seek consent from those they investigate and lose access to asset and tender records. It welcomes the Court’s call for balance and asks for a consensus that keeps officials open to scrutiny.

Key Arguments at a Glance

The Hindu argues that the DPDP Act, by giving journalism no specific exemption and by narrowing the RTI Act’s personal-information clause, risks a serious chilling effect on the media, and that stakeholders must build a consensus under which public functionaries and those handling public funds are not insulated from scrutiny under the guise of privacy.

Supporting
  • Without a journalism exemption, a reporter investigating misconduct could bear the duties of a data fiduciary, including notice and consent, towards the very people under investigation.
  • The Act already exempts processing for research, archiving and statistical purposes under Section 17(2)(b), which the editorial says makes the denial of a similar exemption to journalists difficult to justify.
  • Section 44(3) substitutes RTI Act Section 8(1)(j) with ‘information which relates to personal information’, dropping the earlier public-interest override; corruption reporting often relies on asset disclosures and tender documents.
  • The Act’s high penalty ceilings, the editorial says, pose an existential threat to smaller and independent newsrooms.
Counter

Privacy is a fundamental right under Article 21 (Puttaswamy, 2017), and a blanket exemption for anyone who calls himself a journalist could become a loophole as news moves to independent creators and social media; the Union Minister has said the provisions do not infringe press freedom.

Way Forward

A narrowly drawn, purpose-based exemption for journalism in the public interest, a public-interest override for information on public functionaries and public funds, and a negotiated framework, with the Court weighing the balance when the matter returns on 17 November 2026.

Background and Context

The petition. The DNPA, described by LiveLaw as “the digital wings of 21 major news organisations”, and Yukta Mudgal, “an independent investigative journalist based in New Delhi”, filed the petition under Article 32. It challenges Sections 7, 17(2), 18, 19, 27, 29, 36, 37 and 44(3) of the DPDP Act and Rules 16, 17 and 23 of the DPDP Rules, 2025. A Bench of Chief Justice of India Surya Kant, Justice Joymalya Bagchi and Justice V Mohana heard it, with Senior Advocate Madhavi Divan for the DNPA. ThePrint reported that the Court declined to stay the Act without hearing the government.

Before the Court (background). The petition states that the DNPA sent a detailed representation to two Ministries, Information and Broadcasting and Electronics and Information Technology, on 10 August 2026; a meeting followed, as background to the case, on 25 August 2026. Divan also told the Bench that other petitions challenging the RTI amendment are pending; LiveLaw notes that in February the Court referred those petitions to a three-judge Bench.

The law’s timeline (background). The Act was enacted on 11 August 2023. The DPDP Rules, 2025 were notified in November 2025 (PIB, 13 and 14 November), with what PIB called an “18-month phased compliance timeline”. So the obligations are still phasing in.

The Analysis

1. The missing exemption. The editorial’s first worry is that without “a specific exemption for journalistic activity”, reporters investigating official misconduct or corruption could face the obligations of a “data fiduciary”, “requiring them to notify and seek consent from the very individuals they are investigating”. The petition makes the same case: the duties of notice, consent and erasure are, it argues, “incompatible with the ordinary functioning of the press”. In Court, Divan put it bluntly: “It will close down the newsroom. What’s the point if I have to ask for permission and consent?” The editorial adds that routine newsgathering is affected too, since personal information is integral to reporting.

2. Exemptions for some, not others. The Act does exempt certain processing. Section 17(2)(b) covers processing “necessary for research, archiving or statistical purposes if the personal data is not to be used to take any decision specific to a Data Principal and such processing is carried on in accordance with such standards as may be prescribed”. The editorial says this makes “the denial of similar protection to journalists difficult to justify”; the petition calls Section 17(2) arbitrary on the same ground. Note the conditions in the research exemption: no decision about the individual, and prescribed standards. Any journalism exemption would face the question of what conditions it should carry.

3. A protection that was dropped. The editorial says “the drafts in 2018, 2019 and 2021 carried a journalistic exemption”. The petition, as LiveLaw reports it, says the Personal Data Protection Bill, 2018 provided one under Section 47, that the 2019 Bill and the Data Protection Bill, 2021 also exempted journalistic activities, and that the 2022 draft “did not retain a specific exemption for journalism”. These are the petition’s and the editorial’s accounts of the drafts.

4. The penalty threat. “Non-compliance can attract penalties of up to ₹250 crore, posing an existential threat to smaller and independent newsrooms,” the editorial says. The precise position: the Schedule to the Act sets the ₹250 crore ceiling for a Data Fiduciary’s failure to take reasonable security safeguards to prevent a personal data breach (Section 8(5)), and ₹200 crore for failing to notify a breach (Section 8(6)). The ceiling is for the gravest breaches, not for journalism as such; but the editorial’s point is that a small newsroom cannot carry even the risk.

5. The RTI amendment. Section 44(3) of the DPDP Act substitutes clause (j) of Section 8(1) of the RTI Act, 2005 with “information which relates to personal information”. The old clause exempted personal information “the disclosure of which has no relationship to any public activity or interest, or which would cause unwarranted invasion of the privacy of the individual unless the CPIO or the State PIO or the appellate authority, as the case may be, is satisfied that larger public interest justifies the disclosure of such information”. The substitution drops everything after “personal information”, including the public-interest test the editorial calls “the earlier public-interest qualification”. The editorial’s line: “The protection of personal information must not be absolute; an overriding public interest must remain a legitimate ground for disclosure, particularly when the information is held by public authorities.” Investigations into corruption, it notes, “often rely on asset disclosures and tender documents containing personal data”, and closing them off “risks reducing journalism to merely reproducing government releases”.

6. The petition’s wider grounds. Beyond the editorial’s two themes, the petition argues that Section 36, read with Rule 23 and the Seventh Schedule of the Rules, could be used to “identify and target confidential journalistic sources”; that the power under Section 37(1) to restrict public access to information is “excessively broad”; and that the Data Protection Board’s “Chairperson and members are selected by the executive, and the law does not require the inclusion of a judicial member”. These are contentions, untested in Court.

7. Who is a journalist? The editorial accepts that the Court “rightly emphasised the need to balance press freedom with the right to privacy”. The Chief Justice told the petitioners: “You are the domain experts. You are the best person to suggest the Union and us how you will ensure there’s no misuse.” The editorial concedes the hard part: with “growing mistrust of legacy media and the rise of independent content creators”, it is difficult to say who should receive protection, and it says the Centre has flagged the same concern. It cites a 2026 Reuters Institute report that the share of 18 to 24-year-olds naming social media as their main source of news rose from 21 per cent in 2015 to 39 per cent in 2025 (the editorial’s figures).

8. Consensus, not only litigation. “A purely legalistic determination of these competing concerns may perhaps prove too onerous,” the editorial says, and it calls for a framework built by consensus. It welcomes the indication by Union Minister Ashwini Vaishnaw that he would meet editors. Vaishnaw, the Minister for Electronics and IT and for Information and Broadcasting, said at a Cabinet briefing, as ThePrint reported, “Please tell your editors that I would like to meet all of them in a proper scheduled meeting.” He added: “Nowhere do they infringe upon the freedom of the press, journalism and media.” No date for such a meeting has been announced.

Data and Institutions Vault

Prelims-grade facts:

The Constitution and the Court:

  • Article 19(1)(a): freedom of speech and expression; press freedom is read into it.
  • Article 21: life and personal liberty; privacy protected as an intrinsic part of it.
  • K.S. Puttaswamy (Retd.) v. Union of India: nine judges; decided 24 August 2017; privacy a fundamental right.
  • Article 32: the route of the DNPA petition to the Supreme Court.

The DPDP Act, 2023:

  • Act No. 22 of 2023, dated 11 August 2023.
  • Data Principal: the individual to whom the personal data relates; Data Fiduciary: determines the purpose and means of processing.
  • Section 17(2)(b): exemption for research, archiving or statistical purposes, with conditions.
  • Section 18: establishes the Data Protection Board of India.
  • Penalty ceilings (Schedule): up to ₹250 crore (security safeguards, Section 8(5)); ₹200 crore (breach notice, Section 8(6)).
  • Section 44(3): substitutes RTI Act Section 8(1)(j) with “information which relates to personal information”.
  • DPDP Rules, 2025: notified November 2025; 18-month phased compliance.

The case:

  • Petitioners: DNPA (21 media publishers) and journalist Yukta Mudgal.
  • Bench: CJI Surya Kant, Justices Joymalya Bagchi and V Mohana.
  • Notice: 27 October 2026; returnable 17 November 2026; no stay.
  • Challenged: Sections 7, 17(2), 18, 19, 27, 29, 36, 37 and 44(3); Rules 16, 17 and 23.

⚠️ Watch the trap: the Court issued notice, not a stay or a ruling. The highest penalty ceiling is for failing to keep personal data secure, not a penalty on journalism. The research exemption is Section 17(2)(b); the RTI amendment is Section 44(3) of the DPDP Act, amending Section 8(1)(j) of the RTI Act, 2005. Privacy rests on Article 21; press freedom on Article 19(1)(a).

The Debate

The case for a journalism exemption and the old RTI test (the editorial’s line). Consent and notice duties sit badly with investigation: the subject of a corruption story will not consent to it. Research and statistics are exempt, so the line between them and public-interest reporting looks arbitrary. And once Section 8(1)(j) covers all personal information, a public authority can refuse asset or tender records without the public-interest test the old clause carried. (Section 8(2) of the RTI Act, which lets a public authority allow access where the public interest in disclosure outweighs the harm, is not amended by the DPDP Act.) Add penalties with high ceilings and the cost falls hardest on small and independent newsrooms.

The case for caution. Privacy is a fundamental right after Puttaswamy, and personal data in the wrong hands harms real people. A broad exemption for “journalism” is hard to draw when anyone with a phone can publish; the editorial itself concedes the difficulty, and the Chief Justice asked the petitioners how misuse would be prevented. The Union Minister says the provisions do not infringe press freedom. The petitioners, the DNPA’s members among them, are also interested parties.

The balanced verdict. The strongest point is narrow: information about how public officials use public power and public money should stay open to scrutiny, which is what the old public-interest test in Section 8(1)(j) allowed. A journalism exemption, if one comes, will need conditions, much as the research exemption has. The Court will hear the matter on 17 November; any meeting between the Minister and editors is so far only an offer.

How to Think About This

Use the “three rights, one test” lens for privacy-versus-transparency questions:

  1. Name the rights: privacy (Article 21), speech and the press (Article 19(1)(a)), and the citizen’s right to know (the RTI Act).
  2. Ask whose information: a private individual’s, or a public functionary’s in a public role? The old Section 8(1)(j) turned on this.
  3. Ask for what purpose: is the processing for a decision about the person, or to inform the public? The research exemption draws a similar line.
  4. Test proportionality: is a blanket rule (all personal information withheld, no journalism exemption) needed, or would a narrower one do?
  5. Separate claim from status: a notice is not a finding; a minister’s offer is not a meeting; a petition’s grounds are not facts.

Diagram-in-Words

Personal data protected (Article 21, Puttaswamy) → DPDP Act, 2023: duties on Data Fiduciaries, an exemption for research but none for journalism → Section 44(3) narrows RTI Section 8(1)(j) to “information which relates to personal information” → DNPA petition; notice on 27 October, returnable 17 November → the editorial asks for a consensus that keeps public functionaries open to scrutiny.

Read it left to right: the editorial’s two objections sit at the second and third steps.

✍️ Mains Answer Framework
Question

The Digital Personal Data Protection Act, 2023 protects informational privacy, but critics say it chills investigative journalism and dilutes the Right to Information. Examine how privacy, press freedom and transparency can be balanced in law. (250 words)

Introduction

The right to privacy is protected as an intrinsic part of the right to life and personal liberty under Article 21 (K.S. Puttaswamy v. Union of India, 2017), while press freedom is read into the freedom of speech and expression under Article 19(1)(a). The Digital Personal Data Protection Act, 2023 gives effect to informational privacy; a writ petition by digital news publishers, on which the Supreme Court issued notice on 27 October 2026, asks whether it does so at the cost of the press and of transparency.

Body

Journalism. The Act exempts processing for research, archiving or statistical purposes under Section 17(2)(b), subject to conditions, but has no specific exemption for journalism; the petitioners argue that the duties of notice, consent and erasure are incompatible with the ordinary functioning of the press, and that earlier drafts (2018, 2019, 2021) carried such an exemption.
RTI. Section 44(3) substitutes Section 8(1)(j) of the RTI Act, 2005 with ‘information which relates to personal information’, removing the words under which personal information could be disclosed where a larger public interest justified it. Asset declarations and tender records, central to accountability, could be withheld.
Institutions. The petition challenges the executive’s selection of the Data Protection Board of India and the Centre’s power to call for information under Section 36 as a risk to confidential sources.
The other side. Privacy is a fundamental right too; a broad exemption invites misuse, and defining who is a journalist is hard as audiences move to social media.
Penalties reach up to ₹250 crore for the gravest breaches, such as failing to keep personal data secure.

Conclusion

The answer lies in proportionality, not absolutes: a purpose-based journalism exemption with safeguards, a restored public-interest override for information on public functionaries and public funds, and an independent adjudicator. A consultative settlement, tested by the Court, would protect both the individual’s data and the citizen’s right to know.

Interview Angle

"A reporter investigating a tender scam needs the names and assets of the officials involved. Should a data protection law treat her as a data fiduciary who must seek their consent? Where would you draw the line?"

Takeaway Box

  • Lift line: “Public functionaries and those handling public funds are not insulated from scrutiny under the guise of privacy.”
  • Core idea: privacy law should not become a shield for public power; keep a public-interest route to information and a carefully bounded space for journalism.
  • Prelims hooks: DPDP Act No. 22 of 2023 (11 August 2023); Section 17(2)(b) research exemption; Section 18 Data Protection Board; Section 44(3) amends RTI Section 8(1)(j); Puttaswamy, 24 August 2017, Article 21.
  • Ethics and Interview angle: an official’s privacy against the public’s right to know: probity requires that what an official holds in trust for the public can be examined by the public.
  • Probable question: “Does the amendment of Section 8(1)(j) of the RTI Act by the DPDP Act, 2023 strengthen privacy or weaken transparency? Discuss.” (GS2, 150 words)

Sources:

  • “Open to investigation: On the challenge to the Digital Personal Data Protection Act, 2023”, editorial, The Hindu, 30 October 2026
  • LiveLaw, report of the Supreme Court hearing on the DNPA petition, 27 October 2026; ThePrint, report on the hearing and on the Union Minister’s remarks
  • Digital Personal Data Protection Act, 2023 (Gazette of India, Act No. 22 of 2023): Sections 2, 8, 17, 18, 44 and the Schedule
  • Right to Information Act, 2005, Section 8(1)(j), as quoted in the NITI Aayog RTI manual
  • PIB: notification of the DPDP Rules, 2025 (14 November 2025); Lok Sabha answer on the DPDP framework (3 December 2025)
  • Supreme Court, K.S. Puttaswamy (Retd.) v. Union of India, W.P.(C) 494 of 2012, 24 August 2017; DNPA, “About us”

Cite this page: Open to Investigation: DPDP Act, Journalism and RTI — Ujiyari.com | Free UPSC & State PCS Editorial Analysis