Full Breakdown
Supreme Court Hears Media Challenge to India’s Digital Data-Privacy Law
By Drooid · · How we work
In this breakdown
01
Core Challenge: DNPA vs. the Digital Personal Data Protection Act
The Digital News Publishers Association (DNPA), representing 21 news organisations—including Network 18, NDTV, The Indian Express, Times Internet, The Hindu, India Today and Zee Media—has filed a petition in the Supreme Court contesting several provisions of the Digital Personal Data Protection (DPDP) Act, 2023 and the DPDP Rules, 2025. The association argues that the lack of a specific exemption for journalistic activity could force newsrooms to seek prior consent before publishing information, expose confidential sources to government data requests, and pre-empt investigative reporting.
Watch
Related reporting
brightcove
Media groups challenge India’s privacy law at top court
02
Background & Context
India’s DPDP Act, passed in August 2023, is the country’s first comprehensive framework for protecting digital personal data. It obliges any “data fiduciary” to process personal data only with the data principal’s consent or for a limited set of “legitimate uses” listed in Section 7. Penalties can reach up to INR250 crore. The DPDP Rules, notified on 13 Nov 2025, detail consent procedures, notice requirements and breach reporting.
The DNPA contends that Section 44(3) amends Section 8(1)(j) of the Right to Information Act, removing the public-interest safeguard that previously allowed disclosure of personal information when it served a larger public good. The petition also targets Section 36 (read with Rule 23) and Section 37, which empower the Union government to requisition information from data fiduciaries and intermediaries without clear safeguards of necessity, proportionality, judicial oversight or notice.
Visual evidence
Images from the story
03
Timeline
- 10 Aug 2026 – DNPA submitted a representation to the Ministries of Information & Broadcasting and Electronics & Information Technology.
- 25 Aug 2026 – Follow-up meeting with ministry officials.
- 27 Oct – Supreme Court bench (CJI Surya Kant, Justices Joymalya Bagchi and V Mohana) issued notice and sought the Centre’s response.
- 17 Nov – Full hearing scheduled.
04
Key Provisions Under Scrutiny
Swipe across the table to see all columns.
| Provision | DNPA’s Concern | Potential Effect |
|---|---|---|
| Section 44(3) (DPDP Act) – amendment to RT Act 8(1)(j) | Removes public-interest exemption for personal data | May compel journalists to obtain consent before reporting on public officials, allowing subjects to block or erase evidence. |
| Section 36 & Rule 23 | Allows the Centre to demand information from data fiduciaries and to prohibit disclosure of such requests | May expose whistleblowers and source identities to government scrutiny. |
| Section 7 (Legitimate Uses) | No carve-out for news reporting | Forces media to treat investigative stories as “non-legitimate” processing, risking fines or forced redaction. |
| Penalty regime | Up to INR250 crore for violations | Heightens financial risk for news organisations undertaking public-interest investigations. |
05
Official Statements & Responses
The bench highlighted the need to balance the right to privacy—recognised as a fundamental right in the 2017 Puttaswamy judgment—with freedom of the press. It noted that any blanket prohibition on disclosure must be proportionate and that the RTI Act’s broader domain should not be unduly narrowed by the DPDP framework.
The association pointed out that unlike the EU, Singapore and Britain, India’s law lacks a written exemption for journalists and warned that the provisions could deter whistleblowers from exposing corruption or electoral malpractice.
06
What’s Next
The Supreme Court will hear detailed arguments on 17 Nov. The decision will determine whether the DPDP Act and Rules will be amended to include a journalistic exemption, whether the contested sections will be struck down, or whether a balanced regulatory scheme will be crafted to protect both privacy and press freedom.