The Digital News Publishers Association (DNPA), representing the digital arms of 21 major Indian news organisations, has approached the Supreme Court challenging the constitutional validity of key provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025. The petition argues that the legislative framework fails to recognise journalistic activity as a legitimate basis for processing personal data, thereby imposing a disproportionate burden on press freedom and the public's right to information.
Supreme Court Issues Notice, Declines Interim Stay
On 27 October 2026, a Bench comprising Chief Justice Surya Kant and Justices Joymalya Bagchi and V. Mohana issued notice on the writ petition. The Court declined to grant an interim stay on the operation of the challenged provisions without first hearing the Union Government. The matter has been listed for further hearing on 17 November 2026.
From Legislative Recognition To Regulatory Omission
The challenge highlights a distinct legislative trajectory. The Personal Data Protection Bill, 2018, expressly recognised journalistic purposes and provided an exemption under Section 47. A similar protection appeared in the 2019 Bill and was deliberated upon by the Joint Parliamentary Committee (JPC) examining that legislation. The Committee acknowledged the importance of freedom of expression for the media while recognising the need to prevent misuse of personal information in the name of journalism. However, this proposed exemption was dropped from the Draft Digital Personal Data Protection Bill, 2022, and was not restored in the Act enacted in 2023.
The petitioners submit that Parliament had previously considered a mechanism to reconcile journalistic freedom with individual privacy. The omission of that protection in the final enactment, without an alternative safeguard, raises the question whether the current framework adequately accommodates the constitutional requirements of investigative reporting.
What Exactly Has Been Challenged?
The petition challenges Sections 5, 6, 7, 17(2), 18, 19, 27, 29, 36, 37 and 44(3) of the DPDP Act, along with Rules 16, 17 and 23 of the DPDP Rules. The challenge broadly concerns four areas.
Absence Of Journalistic Exemption
Sections 5 and 6 establish the notice and consent framework, while Section 7 deals with certain legitimate uses of personal data. The petitioners contend that journalism has not been recognised as a distinct basis for processing personal information in the public interest. Section 17(2), which provides specified exemptions for research, archiving and statistical purposes, is challenged for excluding journalism. The petition illustrates that requiring a journalist to notify an individual under investigation, or obtain consent before processing relevant information, could defeat the investigation itself.
Phased Commencement And Operative Provisions
The Act and Rules operate under a phased commencement framework. The following table summarises the key commencement dates relevant to the challenge:
Provision Category | Sections / Rules | Commencement Date |
|---|---|---|
Institutional Provisions | Sections 18 to 26; Section 44(3) (RTI Amendment) | 13 November 2025 |
Substantive Processing Provisions | Sections 3 to 17, 36, 37 | 13 May 2027 |
Data Protection Board Appointments | Rule 17 | Already Commenced |
Specific Rules Challenged | Rules 16, 23 | 13 May 2027 |
The substantive provisions governing the processing of personal data, including the notice and consent requirements under Sections 5 and 6, are scheduled to come into force on 13 May 2027.
Can Privacy Law Become A Gag Order On Investigative Journalism ?
The petition raises the core constitutional question whether a law enacted to protect informational privacy can, in its application, impose a disproportionate burden on press freedom under Article 19(1)(a) and the public's right to know, in the absence of a journalistic exemption.
Impact On RTI And Public Interest
Section 44(3) of the DPDP Act amends Section 8(1)(j) of the Right to Information Act, 2005. The petitioners argue that this amendment, read with the absence of a journalistic exemption, narrows the scope of accessible personal information, further restricting the ability of journalists to verify and report on matters of public interest involving public officials or government contracts.
The Supreme Court's decision to hear the matter places the compatibility of India's data protection regime with constitutional guarantees of free speech and press freedom under direct judicial scrutiny. The Union Government is expected to file its response before the next date of hearing.