DPDP Act Constitutionality Questioned Over RTI Amendment: Impact on Public Functionaries

What happened

Legal and academic inquiries are currently examining the constitutional validity of the Digital Personal Data Protection (DPDP) Act, 2023. At the heart of this scrutiny is a specific statutory provision within the new data protection law that directly amends Section 8(1)(j) of the Right to Information (RTI) Act, 2005. The core issue being closely examined by legal experts is whether this specific legislative update restricts the scope of information that citizens can routinely seek against public functionaries. As government bodies prepare to align their data practices with the newly issued DPDP Rules, 2025, this ongoing analysis highlights the profound statutory tension between the comprehensive protection of digital personal data and the historic transparency mandates that govern public officials under the RTI Act.

Mechanics of the RTI Amendment

To understand the structural impact of the DPDP Act on transparency frameworks, it is crucial to analyze the exact changes made to Section 8(1)(j) of the RTI Act. Previously, Section 8(1)(j) permitted the disclosure of personal information if the Public Information Officer was satisfied that a larger public interest justified the disclosure. The DPDP Act 2023 amends this provision by completely removing the public interest exemption caveat. Consequently, the DPDP Act amendment creates a blanket exemption prohibiting the disclosure of any personal information under the RTI Act. Section 3 of the DPDP Act establishes that the law applies to the processing of digital personal data within the territory of India where data is collected in digital form or digitized subsequently. Crucially, while the DPDP Rules, 2025 dictate the stringent operational procedures and security safeguards public authorities must now follow as Data Fiduciaries, the Act's amendment mechanically alters the baseline for disclosing personal information of public officials. Public functionaries now enjoy strict data privacy protections against general public information requests, severely curtailing the mechanisms that previously allowed access to their personal details.

Constitutional Arguments: Data Protection vs. Transparency

The constitutional arguments surrounding these legislative changes focus intensively on the delicate balance between a public functionary's fundamental right to privacy regarding their digital personal data and the general public's fundamental right to information. Under Section 4(1) of the DPDP Act, personal data may only be processed in accordance with the Act and for a lawful purpose, primarily relying on the consent of the Data Principal or for certain legitimate uses. Furthermore, Section 4(2) clarifies that a lawful purpose means any purpose not expressly forbidden by law. By amending the RTI Act, the legislature has taken the stance that fulfilling routine RTI requests for personal data without a clear, specific lawful basis directly infringes upon individual privacy rights. However, this creates a profound constitutional tension with the original transparency mandate of the RTI Act. Critics of the amendment argue that removing the larger public interest test fundamentally hinders public accountability, shielding public functionaries from necessary democratic scrutiny. Conversely, proponents assert that under the constitutional framework, public officials are entitled to the exact same data protection rights and privacy guarantees as any other Data Principal in India. The legal system is now forced to weigh these directly competing fundamental rights.

Conclusive Assessment on Information Scope

Based on the structural changes introduced, the scope of obtainable information regarding public functionaries has undeniably been restricted by this legislative update. By overriding the previous discretionary disclosure mechanisms, the DPDP Act ensures that citizens can no longer invoke a broader public interest to forcibly access the personal details of government officials through standard RTI applications. The new legal framework, operationalized by the procedural mandates within the DPDP Rules, 2025, clearly prioritizes personal data privacy. It firmly establishes that general transparency mandates cannot be used as an instrument to force the unauthorized disclosure of personal data. Consequently, the amendment to Section 8(1)(j) places significant, codified limitations on what citizens can uncover about public officials, shifting the legal baseline from conditional transparency to strict data protection.

What to watch

The ongoing legal and academic inquiries into the RTI Act amendment will set a major precedent regarding how the constitutional balance between the DPDP Act and national transparency laws is ultimately interpreted. Resolving the constitutionality of this specific provision, especially as public authorities begin enforcing the operational guidelines of the DPDP Rules, 2025, will clarify the definitive boundaries between a public functionary's right to digital personal data protection and the citizen's statutory transparency rights.