Does the Data Act dilute the Right to Information Act?

Does the Data Act Dilute the Right to Information Act?

UPSC Prelims + Mains Study Note

1. At a Glance

• The Digital Personal Data Protection (DPDP) Act, 2023 amended Section 8(1)(j) of the Right to Information (RTI) Act, 2005, replacing a calibrated, public-interest-weighted exemption with a blanket exemption for all personal information. [S3][S4]
• Critics argue this effectively guts the RTI by allowing any personal data-related disclosure to be denied without the earlier balancing test; the government counters it merely codifies the Puttaswamy (2017) privacy judgment. [S1][S5]
• Petitions challenging this amendment have been referred to a Constitution Bench of the Supreme Court — making this a live constitutional question. [S5]
• A UPSC aspirant must understand this as an intersection of GS-II topics: fundamental rights (privacy vs. transparency), statutory law, and RTI governance.

2. Why in the News

• February 25, 2026: The Hindu reported that petitions challenging the RTI amendment embedded in the DPDP Act have been referred to a Constitution Bench of the Supreme Court. [S5]
• January 2025: The government notified the DPDP Rules, 2025, bringing the data protection regime closer to operationalisation, intensifying scrutiny of its RTI implications. [S2]
• Civil society organisations and RTI activists have persistently challenged the blanket exemption, arguing it enables public authorities to deny legitimate public-interest disclosures. [S5]

3. Background & Evolution

Chronological Milestones:

Predecessor: Personal Data Protection Bill, 2019 (introduced but withdrawn in 2022 due to recommended changes by a Joint Parliamentary Committee).

4. Core Static Facts

RTI Act, 2005 — Original Section 8(1)(j): - Exempted personal information where disclosure has no relationship to any public activity or interest, or would cause unwarranted invasion of privacy - Importantly, allowed disclosure if larger public interest justified it — a case-by-case balancing test

DPDP Act, 2023 — Amendment to Section 8(1)(j): - Replaced the nuanced exemption with a blanket exemption for all personal information - Removed the public-interest override for personal data [S5] - Section 8(2) of the RTI Act (which allows disclosure where public interest outweighs harm) remains operative — per government position [S1]

DPDP Act Key Definitions: - Data Principal: Individual whose personal data is being processed [S3][S4] - Data Fiduciary: Entity (person, company, government body) that processes personal data [S3][S4] - Personal Data: Any data about an identifiable individual [S3]

Institutional Facts: - Implementing Ministry: Ministry of Electronics and Information Technology (MeitY) [S3] - Legislation: DPDP Act, 2023 — Act No. 22 of 2023 [S4] - Constitutional Basis: Puttaswamy (2017) — Right to Privacy under Article 21; also Article 19 (freedom of speech/expression) [S5] - Nodal Body for RTI: Department of Personnel and Training (DoPT), Ministry of Personnel

5. Multi-Dimensional Analysis

Legal / Constitutional

• Article 21 vs. RTI: Privacy (Article 21) and transparency (Article 19 + statutory RTI) are both fundamental; the amendment tilts the balance heavily toward privacy. [S5]
• Old Section 8(1)(j) applied a proportionality test — in line with the Puttaswamy ruling's own insistence that privacy restrictions be proportionate; the blanket exemption arguably violates this standard. [S5]
• Referring the matter to a Constitution Bench signals the SC recognises a potential conflict between two fundamental rights — outcome will be landmark. [S5]
• The government's position: Section 8(2) (public interest override) survives, softening the blow; critics say PIOs rarely invoke 8(2) proactively. [S1]

Ethical / Governance

• RTI is the primary anti-corruption tool in India; blanket personal-data exemption can be misused to shield corrupt officials (e.g., refusing to disclose salary, asset, appointment records by labelling them "personal data"). [S5]
• Accountability deficit: Public servants' information (assets, transfers, qualifications) has historically been disclosed under RTI as public-interest information — blanket exemption may close this window. [S5]
• Data fiduciaries include government entities — the same bodies that are also public authorities under RTI; dual-hat conflict of interest in deciding what to disclose. [S3]

Administrative

• Information Commissioners will face interpretive uncertainty: when does a data-denial under DPDP Act override an RTI request? No clear hierarchy currently exists. [S5]
• Data Protection Board of India (under DPDP Act) and Central Information Commission (under RTI Act) are separate bodies — potential jurisdictional overlap. [S3]
• DPDP Rules, 2025 notified but implementation framework still being built — creating a regulatory vacuum. [S2]

Historical

• Pre-2005, citizens had no statutory right to government information; RTI (2005) was a landmark transparency instrument backed by civil society movements.
• In 2019, the RTI (Amendment) Act had already weakened CIC independence (tenure/service conditions); DPDP amendment compounds this trend of chipping away at RTI's effectiveness.

6. Recent Developments (Last 12–18 Months)

• November 2025: MeitY notified DPDP Rules, 2025, finalising the implementation framework for the DPDP Act, including provisions for the Data Protection Board of India. [S2]
• Early 2026: Government defended the RTI amendment, stating PIB position that "DPDP Act upholds privacy while preserving transparency under RTI" and that Section 8(2) remains a safety valve. [S1]
• February 2026: Supreme Court referred petitions challenging the DPDP Act's amendment to RTI Act's Section 8(1)(j) to a Constitution Bench. [S5]
• The Constitution Bench referral places this among the most significant pending constitutional questions on data governance and transparency in India.

7. Prelims Hooks

1. DPDP Act, 2023 is Act No. 22 of 2023 passed by Parliament in August 2023. [S4]
2. The Act was framed following the Supreme Court's direction in K.S. Puttaswamy v. Union of India (2017). [S5]
3. Puttaswamy (2017) declared right to privacy as fundamental right primarily under Article 21 and also under Article 19. [S5]
4. The Justice B.N. Sri Krishna Committee submitted its report and draft data protection Bill in July 2018. [S5]
5. DPDP Act amended Section 8(1)(j) of the RTI Act, 2005 — the personal information exemption clause. [S5]
6. Under the DPDP Act, individuals whose data is processed are called Data Principals; entities processing it are Data Fiduciaries. [S3]
7. The implementing ministry for the DPDP Act is MeitY (Ministry of Electronics and Information Technology). [S3]
8. DPDP Rules, 2025 were notified in November 2025. [S2]
9. Section 8(2) of the RTI Act — the public-interest override — was not repealed by the DPDP Act. [S1]
10. The challenge to the RTI amendment in the DPDP Act has been referred to a Constitution Bench of the Supreme Court (February 2026). [S5]
11. The original Section 8(1)(j) required a two-part test: no relationship to public activity AND no public interest justification — the DPDP amendment collapsed this into a blanket bar. [S5]
12. Predecessor to the DPDP Act: the Personal Data Protection Bill, 2019, which lapsed without enactment. [S4]

8. Mains Relevance

GS Paper Mapping: - GS-II: Governance, Constitution, RTI, Fundamental Rights, Statutory bodies - GS-IV: Ethics — Transparency, accountability, right to information as an ethical instrument

Syllabus Headings: - Important aspects of governance, transparency and accountability (GS-II) - Fundamental rights — conflicting rights, reasonable restrictions (GS-II) - Role of civil services in a democracy — use of RTI by citizens (GS-II)

Plausible Mains Question Stems: 1. "The DPDP Act, 2023 amends Section 8(1)(j) of the RTI Act to provide a blanket exemption for personal information. Critically examine whether this dilutes the spirit of the RTI Act and discuss the constitutional implications." (GS-II, 15 marks) 2. "The right to privacy and the right to information are both constitutionally recognised in India. How can the state reconcile these competing rights in the context of the DPDP Act, 2023?" (GS-II, 10 marks) 3. "Transparency in public life is the bedrock of democratic accountability. In light of the DPDP Act's impact on RTI, assess whether India is moving towards or away from this ideal." (GS-IV / GS-II, 15 marks)

9. Related Topics to Study Next

10. Common Errors / Trap Areas

1. Confusing the implementing ministries: DPDP Act → MeitY; RTI Act → DoPT (Department of Personnel and Training, under Ministry of Personnel). Do not mix these up.
2. Wrong year for Puttaswamy: The privacy judgment is 2017, not 2019 or 2021. The DPDP Act came in 2023.
3. Assuming Section 8(2) was also removed: Only Section 8(1)(j) was amended; Section 8(2) (public interest override) still exists — critical nuance for both Prelims MCQs and Mains arguments.
4. Conflating DPDP Act with PDP Bill, 2019: They are different instruments. The 2019 Bill lapsed; the 2023 Act is the operative law. Justice Sri Krishna Committee relates to the 2018 draft, not directly to the 2023 Act.
5. Assuming Constitution Bench has decided the case: As of February 2026, the matter has only been referred — no verdict yet. Do not state the SC has struck down or upheld the amendment.

11. Sources

• [S1] "DPDP Act, 2023 Upholds Privacy While Preserving Transparency Under RTI" — https://www.pib.gov.in/PressReleasePage.aspx?PRID=2158506 — (Tier 1: pib.gov.in)
• [S2] "Digital Personal Data Protection (DPDP) Rules, 2025" — https://www.pib.gov.in/PressReleasePage.aspx?PRID=2190655 — (Tier 1: pib.gov.in)
• [S3] "Digital Personal Data Protection Act, 2023 — MeitY" — https://www.meity.gov.in/content/digital-personal-data-protection-act-2023 — (Tier 1: meity.gov.in)
• [S4] "The Digital Personal Data Protection Act, 2023 (No. 22 of 2023)" [Full Act PDF] — https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf — (Tier 1: meity.gov.in)
• [S5] "Does the Data Act dilute the Right to Information Act?" — The Hindu, 25 February 2026, by Rangarajan R. — https://www.thehindu.com/todays-paper/2026-02-25/th_international/articleG0FFKQVNT-13644627.ece — (Tier 4: thehindu.com; article content supplied as primary source)