Introduction
The friction between the fundamental right to information under Article 19(1)(a) and the right to privacy under Article 21 of the Constitution of India has reached a critical judicial juncture. In a batch of petitions led by Venkatesh Nayak vs. Union of India [W.P.(C) No. 000177/2026], the Supreme Court of India has agreed to examine whether the restrictive regime ushered in by the Digital Personal Data Protection (DPDP) Act, 2023 practically works to repeal or severely erode statutory transparency mandates established under earlier enactments.
The Core Legislative Dispute: Section 44(3) of DPDP Act vs. Section 8(1)(j) of RTI Act
At the heart of the challenge is Section 44(3) of the DPDP Act, 2023, which drastically amends Section 8(1)(j) of the Right to Information (RTI) Act, 2005.
Under the original framework of Section 8(1)(j) of the RTI Act, public authorities could withhold "personal information" only if it bore no relation to any public activity or interest, or if disclosure would cause an unwarranted invasion of privacy. Crucially, the original provision contained a two-pronged safeguard:
- A larger public interest override, allowing Public Information Officers (PIOs) and appellate authorities to disclose personal information if the public interest justified it.
- A proviso stipulating that information which cannot be denied to the Parliament or a State Legislature shall not be denied to any individual.
However, Section 44(3) of the DPDP Act deleted these balancing mechanisms and replaced them with a blanket exemption for any information that relates to "personal data". Petitioners argue that this broad exemption empowers public authorities to issue generic refusals, transforming a law designed to ensure public accountability into a protective shield for public functionaries.
The Judicial Imperative: Harmonious Construction
During recent proceedings before the Supreme Court, the Bench highlighted that both the DPDP Act, 2023 and the RTI Act, 2005 are vital central legislations enacted by Parliament. Consequently, the judiciary cannot permit one statute to implicitly override or nullify another without rigorous judicial scrutiny.
Under settled rules of statutory interpretation, when two central statutes occupy overlapping domains, courts must apply the principle of harmonious construction to give effect to the legislative intent of both, rather than allowing an implied repeal. The Apex Court will evaluate whether a balanced coexistence between data privacy and democratic oversight is achievable, or if Section 44(3) constitutes an unreasonable restriction on the fundamental right to information.
Key Arguments Raised by Petitioners
The writ petition filed by prominent transparency advocate Venkatesh Nayak raises several critical constitutional and administrative concerns:
- Dilution of Public Accountability: Disclosures regarding public official asset declarations, discretionary quota allotments, expenditure of public funds, and recruitment processes frequently involve "personal data". A blanket ban deprives citizens of their right to audit public governance.
- Severing Public Interest Exception: By removing the "larger public interest" balancing test, the legislature has eliminated judicial and administrative discretion to weigh privacy claims against systemic corruption or maladministration.
- Overbreadth and Arbitrariness: The amended framework fails the test of proportionality laid down in the landmark judgment K.S. Puttaswamy vs. Union of India (2017), as it prioritizes complete confidentiality over democratic transparency without narrow tailoring.
Implications for Governance and Compliance
The outcome of this constitutional challenge will shape the landscape of Indian administrative law and data governance. If the Supreme Court upholds the restrictive amendment, public authorities will gain broad immunity from disclosing records containing personal details. Conversely, if the Court reads down Section 44(3) or restores the public interest override, it will re-establish transparency as a paramount constitutional principle while defining precise boundaries for privacy.
For institutions, compliance officers, and legal practitioners, this case serves as a crucial reminder that privacy compliance under the DPDP Act cannot be viewed in isolation from statutory obligations under public law and transparency frameworks.
