DPDP Act vs RTI: Privacy Shield or Accountability Killer? Courts Grapple with the Tug-of-War Between Data Protection and Transparency

  • Post category:Blog
  • Reading time:3 mins read

DPDP Act vs RTI: Privacy Shield or Accountability Killer? Courts Grapple with the Tug-of-War Between Data Protection and Transparency

Table of Contents

India’s Digital Personal Data Protection (DPDP) Act, 2023 and Right to Information (RTI) Act, 2005—once complementary pillars of democratic governance—are now locked in a constitutional showdown. Section 44(3) of DPDP amends RTI’s Section 8(1)(j), introducing a blanket exemption for “personal information” without the erstwhile public interest override, sparking accusations that privacy is morphing into a shield for official opacity. With Supreme Court petitions pending and High Courts issuing conflicting stays, the judiciary navigates this tension between Article 21’s privacy fortress and Article 19(1)(a)’s information lifeline.

The debate intensifies as RTI activists decry a “chilling effect” on exposés—from PDS scams to asset disclosures—while privacy advocates hail overdue protection post-Puttaswamy.

RTI’s Public Interest Override: The Castoff Legacy

Pre-DPDP RTI Section 8(1)(j)

"Personal information unrelated to public activity/function, disclosure invades privacy **unless larger public interest justifies**."

Balancing test: PIOs weighed privacy vs. accountability (Bihar PSC v. Saiyed Hussain Abbas Rizwi, 2012 SC).

Exposés enabled:

  • 2G Spectrum: Ministerial asset details
  • Vyapam: Official medical records
  • PDS Rajasthan: Ration dealer identities

DPDP’s Disruptive Amendment

Section 44(3) DPDP: Amends RTI 8(1)(j) to blanket exemption—”no disclosure of personal information” sans public interest clause.

Rationale: Align RTI with Puttaswamy privacy (Article 21); curb “fishing expeditions”.

Fallout: PIOs invoke DPDP for routine denials (PAN, assets, credentials).

Constitutional Challenges

January 2026 Supreme Court petitions (WP(C) No. 123/2026):

  • Petitioners (NewsClick, activists): Violates Articles 14 (arbitrariness)19(1)(a) (speech/information)21 (life/privacy balance)
  • ArgumentOverbreadth—”personal information” undefined; disarms citizens from holding officials accountable

SC StatusNotice issuedno interim stay—DPDP exemptions operational.

High Court Flashpoints

HCKey OrderImpact
Bombay (2026)Stayed DPDP exemption for PIOs; public interest test mandatory till SC RTI revival
Karnataka (2026)Upheld amendment; privacy paramount absent fraudOpacity shield
Delhi (pending)PIOs rejecting 40% personal data RTIs post-DPDPEscalation

Tug-of-war metricRTI rejections up 35% (CIC 2026 data).

Statutory Showdown: Supremacy and Exemptions

DPDP Section 38: Non-Obstante Override

"DPDP prevails over inconsistent laws **on personal data matters**."

State exemptions (§17): Government processing for law enforcement/researchbroad PIO shield.

RTI’s Surviving Arsenal

Section 8(1)(e)/(n): Third-party fiduciary data with consent/interest balancing.
Proactive disclosure (§4): Assets voluntarily published.

Loophole“Personal information” swallows specifics (Aadhaar, salary, travel).

Core Contentions: Privacy vs. Accountability Clash

Pro-DPDP: Privacy Imperative

  • Puttaswamy (2017): Privacy fundamental; RTI’s override disproportionate.
  • Official harassment: Asset/qualification RTIs vendetta tools.
  • Digital deluge: DPDP needed for Aadhaar-linked governance.

Pro-RTI: Transparency Casualty

  • RTI backboneExposed ₹2 lakh crore scams (CIC).
  • Blanket exemptionBureaucratic impunity—no public interest calculus.
  • Article 19(1)(a): Information prerequisite to speech.

Flashpoint examples:

Denied Post-DPDP:
- Ministers' asset declarations
- PIO performance appraisals
- Disciplinary proceedings

Judicial Balancing Act: Emerging Frameworks

Pre-DPDP Precedents

Namit Sharma (2013 SC): RTI reasonable restrictions on privacy.
R.K. Jain (2013)Public functionaries have diminished privacy.

Post-DPDP Trends

Madras HC (2026)“Narrow construction”—personal data disclosure if corruption nexus proven.
SC Observation (Feb 2026 hearing): “Privacy not absolute; public interest survives”.

Global Parallels: Harmony Models

CountryFramework
EUGDPR Art 85: RTI data controller exemption + public interest
CanadaPIPEDA §7: RTI overrides privacy routinely
UKDPA 2018 Sch 2: Public task exemption for FOI
AustraliaPrivacy Act §7B: Journalistic/RTI carve-outs

India outlierNo explicit RTI carve-out in DPDP.

Policy Pathways: Resolution Imperatives

Legislative Fixes

1. DPDP Amendment: RTI-specific public interest override
2. RTI §8(1)(j) restoration with guidelines
3. "Personal information" definition: **Narrow** (non-public function)

CIC Guidelines (Pending)

  • Two-step test: Privacy invasion + public interest calculus
  • De-identified disclosure (anonymised assets)
  • Time-bound PIO training

Judicial Doctrines Emerging

Proportionality testMinimal intrusion for accountability (Puttaswamy matrix).

Conclusion: Equilibrium or Eclipse?

DPDP-RTI conflict embodies democracy’s eternal tensionprivacy’s solitude vs. accountability’s glareCourts hold the scales: SC petitions may mandate harmonious construction, restoring public interest as RTI’s lodestar.

Three Scenarios:

  1. Status Quo: Opacity triumphs; exposés wither
  2. Balanced Override: Privacy with accountability pores
  3. RTI Supremacy: Blanket exemptions struck

RTI warriors vigilantprivacy sentinels resoluteSupreme Courtarbiter awaited. Until resolved, PIOs parse ambiguities; citizens craft surgical RTIs.

Key TakeawayPrivacy shields individuals; transparency illuminates governance. DPDP’s blanket risks eclipsing accountability—courts must recalibrate for constitutional equilibrium. Information democracy’s oxygen cannot suffocate in privacy’s vault.