Discuss the constitutional tension between the Right to Privacy (Article 21) and the Right to Information (Article 19). How does the DPDP Act, 2023 attempt to balance these rights, and where does it fall short?

Q. Discuss the constitutional tension between the Right to Privacy (Article 21) and the Right to Information (Article 19). How does the DPDP Act, 2023 attempt to balance these rights, and where does it fall short? (15 marks, 250-350 words)

The Right to Privacy, read into Article 21 by K.S. Puttaswamy (2017), and the right to receive information under Article 19(1)(a), operationalised by the RTI Act, 2005, are both facets of the same democratic order — yet they pull in opposite directions. The Supreme Court's March 2026 notice to the Union on what constitutes "personal data" shows the balance is still unsettled [3].

The constitutional tension - Privacy demands informational self-determination; transparency demands that power-holders be answerable — both are constitutionally protected, neither absolute. - The friction is sharpest over public servants' data: salary, assets and file notings are personal, yet inseparable from public accountability. - No bright line exists between "personal data" and "public data"; the DPDP Act itself does not draw one, which is precisely why the Court has agreed to examine it [3].

How the DPDP Act attempts a balance - Adopts a consent-based framework built on principles of purpose limitation, data minimisation, storage limitation and accountability [1]. - Grants Data Principals rights to access, correct, erase and nominate, with a Data Protection Board functioning as a fully digital grievance forum [1]. - Government maintains that the amended Section 8(1)(j) merely requires careful assessment rather than prohibition, and that Section 8(2) RTI still permits public-interest disclosure [2]. - Was framed through wide consultation — the draft Rules alone drew 6,915 inputs before notification [4].

Where it falls short - Section 44(3) removes the explicit public-interest override from Section 8(1)(j), enabling officials to shield information behind privacy [3]. - The Board lacks structural independence from the Executive, unlike SEBI or TRAI, weakening scrutiny of state processing [3]. - Broad state exemptions leave citizens with limited remedy against disproportionate data collection [3].

A rights-balancing rather than rights-trading approach is essential. Restoring a statutory public-interest test, defining "public data" clearly, and insulating the Board's appointments would let privacy and transparency reinforce — not cannibalise — each other, as Puttaswamy envisaged.

(~315 words)

Sources: 1. Government notifies DPDP Rules to empower citizens and protect privacy — PIB — consent framework, seven principles, Data Principal rights, Data Protection Board 2. DPDP Act, 2023 Upholds Privacy While Preserving Transparency Under RTI — PIB — Government's position on Section 8(1)(j) amendment and Section 8(2) override 3. "SC to study what constitutes 'personal data' in DPDP laws" — The Hindu, 13 March 2026 (link unverifiable at time of writing) — SC notice, Section 44(3) challenge, Board independence and surveillance concerns 4. Draft Digital Personal Data Protection Rules, 2025 Receive 6,915 Inputs from Citizens and Stakeholders — PIB — public consultation figure

*Discuss the constitutional tension between the Right to Privacy (Article 21) and the Right to Information (Article 19). How does the DPDP Act, 2023 attempt to balance these rights, and where does it fall short?*

Discuss the constitutional tension between the Right to Privacy (Article 21) and the Right to Information (Article 19). How does the DPDP Act, 2023 attempt to balance these rights, and where does it fall short?