Published On: April 21st 2026
Authored By: Ayesha A
Government Law College Vellore
Abstract
The Digital Personal Data Protection (DPDP) Act, 2023 entered its operational phase in 2025, confronting India with a critical constitutional crossroads. The central legal controversy concerns Section 44(3) of the DPDP Act, which fundamentally alters the Right to Information (RTI) Act, 2005. By removing the “public interest” clause from Section 8(1)(j) of the RTI Act, Section 44(3) draws a thick curtain over government employees’ personal data — and that change is at the heart of the dispute today. This article examines the growing tension between the “Right to Know” enshrined in Article 19(1)(a) of the Constitution and the “Right to Be Let Alone” protected by Article 21. The central question is whether this legislative shift marks the beginning of an era in which government secrecy prevails over citizens’ right to access information.[1]
I. Introduction: The Delicate Balance of a Healthy Democracy
Is it law that protects citizens’ privacy from the state — or that protects the state’s boardroom from citizens?
Democracy is not a fixed institution; it is a fragile balance between government transparency and citizens’ privacy. For nearly two decades, the RTI Act served as sunlight, breaking through the hidden corners of India’s bureaucracy. It fundamentally transformed the relationship between power and the public, shifting India from colonial secrecy toward democratic openness. But the rollout of the DPDP Act in 2025–26 changed that equation. “Consent” is now invoked to escape accountability. What has emerged is a conflict between the right to access information and the right to protect individual privacy — and the critical question for 2025–26 is whether privacy rights are being weaponised to foreclose public scrutiny.
II. The Legislative Shift: From Balance to Blockade
2.1 The Original Settlement (2005–2024)
It is important to remember that the RTI Act never trampled on privacy — it handled privacy with genuine care. Section 8(1)(j) of the RTI Act kept most personal information private, unless a demonstrable public interest outweighed the privacy concern. The balance was intuitive: a bureaucrat’s medical history or personal finances remained under wraps, but educational qualifications, asset declarations, and official conduct — all funded by taxpayers — were open to scrutiny. This made sense, because anyone exercising state power must accept a degree of reduced privacy as part of the public trust they hold.
2.2 The 2025 Paradigm Shift
This careful balance was dismantled when the DPDP Rules were notified in November 2025. Section 44(3) of the DPDP Act amended Section 8(1)(j) of the RTI Act, eliminating the “public interest” escape hatch entirely. RTI requests can now be rejected outright — no reasoned judgment required. If a citizen seeks an official’s asset disclosure to investigate corruption, the state need not justify its refusal. It simply invokes “Data Protection,” and the inquiry ends. For many observers, this is not a technical legislative update; it is a fundamental overhaul of India’s democratic architecture.
2.3 A Crisis of Proportionality: Scalpel vs. Sledgehammer
The Supreme Court’s landmark ruling in Justice K.S. Puttaswamy (Retd.) v. Union of India[2] gave India a sophisticated analytical tool — the Doctrine of Proportionality — to navigate fundamental rights with precision. Under this doctrine, any infringement of a fundamental right must be legally authorised, pursue a legitimate aim, be suitable to achieve that aim, and must not go beyond what is necessary.
Section 44(3) operates more like a sledgehammer than a scalpel. It draws no distinction between ordinary citizens and public servants. Officials are granted the same privacy protection as private individuals — even though their authority and salaries are derived entirely from public resources. Treating these two categories identically is not just doctrinally unsound; it violates the foundational principle that public office is a public trust.
III. The 2026 Judicial Crossroads
All eyes are on the Supreme Court’s Constitution Bench, currently seized of Venkatesh Nayak v. Union of India.[3] The petitioners advance a compelling argument: privacy was designed to protect citizens from the state — not to shield the state from citizens. The new amendment has enabled a creeping “administrative arbitrariness.” The DPDP Act’s expansive definition of “personal data” now empowers Public Information Officers (PIOs) to unilaterally classify almost any document — promotion files, internal memos, complaint records — as personal data, provided it contains someone’s name. This is no longer a framework for privacy protection; it is a statutory licence for a new “Right to Secrecy” in the hands of the powerful.
IV. The Ripple Effect: Socio-Legal Consequences
The practical consequences of this information blackout are already being felt across multiple domains.
4.1 The Welfare Vacuum
In rural India, obtaining lists of MGNREGA or PDS beneficiaries was once the primary mechanism for preventing diversion of welfare funds to fictitious “ghost” recipients. Under the new regime, the state can shield these lists behind “privacy,” making it far easier for public wealth meant for the poor to be siphoned away. Transparency was not merely a democratic virtue here — it was a safeguard against poverty.
4.2 Silencing the Fourth Estate
The RTI Act once empowered journalists to uncover the truth — consider the landmark exposés of the 2G spectrum allocation and the Adarsh Housing scam. With the DPDP Act effectively neutralising the RTI, the media can no longer independently verify the credentials, assets, or conduct of those in power. Investigative journalism is reduced to relying on unverified sources rather than documented facts, degrading the quality of public discourse.
4.3 The Litigation Trap
Justice is a luxury when it is inaccessible. When an RTI request is refused on the grounds of “personal data,” the path to remedy runs through High Courts and ultimately the Supreme Court. Because “personal data” remains inadequately defined, courts are already being flooded with writ petitions. PIOs, apprehensive of steep DPDP penalties, default to rejection. Appeals accumulate, and ordinary citizens may wait years for answers. A right delayed by five years is, in effect, a right denied.
V. Reimagining the Triad: Freedom, Information, and Privacy
These three rights — freedom of expression, access to information, and the right to privacy — need not be adversaries. They form what this article terms a “Triad of Intellectual Liberty.” One cannot be truly free under Article 19 if kept in ignorance about the workings of governance; nor can one be truly free under Article 21 if the state surveils every dimension of private life. These rights are mutually constitutive, not mutually exclusive.
The answer lies in restoring a robust Public Interest Override. Jurisdictions such as the European Union — under the General Data Protection Regulation (GDPR)[4] — recognise that privacy is not an absolute barrier; it must be balanced against the public interest in scrutinising those who exercise official power. Indian law requires a clear “harm-benefit” test: before any information is withheld, a reasoned determination must establish that the privacy harm to the individual concretely and proportionately outweighs the collective public benefit of disclosure.
VI. Conclusion: A Republic of Transparency or a State of Secrecy?
India’s democratic future will be shaped, in no small measure, by how this collision between the RTI Act and the DPDP Act is resolved. Digital privacy is a legitimate and pressing concern in the modern world. But invoking it as a shield for corruption and institutional opacity is constitutionally unacceptable. A democracy loses its moral core when it buries itself behind “data protection.”
The judiciary must apply a rigorous Proportionality Test. For any government information to be withheld, the state must demonstrate that disclosure would cause specific and identifiable harm to an individual that concretely outweighs the collective benefit of transparency. Article 21 (Privacy), while fundamental, cannot be deployed to extinguish Article 19, because freedom of expression is the instrument through which all other rights are defended and enforced.
The Supreme Court’s anticipated ruling presents India with a defining choice. The Triad of Intellectual Liberty demands that citizens retain their privacy and that government operations remain visible to those who fund them. The RTI must not be reduced from a sharp instrument of democratic accountability to a tangled web in which truth is held hostage by procedural technicalities. A legal system that prioritises the personal data of the powerful over the investigative rights of taxpayers is not protecting privacy — it is protecting privilege.
References
[1] Ajay Kumar Bisht & N. Shanmuka Sreenivasulu, Information Privacy Rights in India: A Study of the Digital Personal Data Protection Act, 2023, in Data Privacy — Techniques, Applications, and Standards (2024).
[2] Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1 (India).
[3] Venkatesh Nayak v. Union of India, W.P. (C) No. 177/2026 (Supreme Court of India – Pending).
[4] Council Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data (General Data Protection Regulation), 2016 O.J. (L 119) 1, art. 86.
