The growth of digital media has transformed the way information is collected, published and shared in India. Newspapers, television channels, online news portals and independent journalists increasingly depend on digital platforms to investigate issues, publish reports and communicate with the public.
However, this digital transformation has also created serious concerns regarding personal data protection and individual privacy.
The Digital Personal Data Protection Act, 2023 (DPDP Act) was introduced to establish a legal framework for protecting the personal data of individuals in the digital environment. While the legislation strengthens privacy rights, it also raises an important constitutional question: Can data protection laws restrict the freedom of the press?
The conflict between the right to privacy under Article 21 and freedom of speech and expression under Article 19(1)(a) makes this legislation particularly important for journalists, media organisations, lawyers and law students.
3. What Is the Digital Personal Data Protection Act, 2023?
The Digital Personal Data Protection Act, 2023 is an Indian law designed to regulate the processing of digital personal data and protect the rights of individuals.
The Act received Presidential assent on 11 August 2023.
Its primary objective is to ensure that personal data is processed lawfully while recognising the legitimate purposes for which organisations may collect and use such information.
Some important features include:
-
Data Principal: The individual to whom personal data relates.
-
Data Fiduciary: A person or organisation that determines the purpose and means of processing personal data.
-
Consent: Individuals generally have to provide consent for the processing of their personal data.
-
Data Protection Board: The statutory body responsible for performing functions under the Act.
-
Rights of Individuals: Individuals receive rights relating to access to information about processing, correction, erasure and grievance redressal, subject to the Act.
The legislation attempts to create accountability in the digital economy while protecting individuals against misuse of their personal information.
4. Freedom of the Press Under the Indian Constitution
Freedom of the press is not expressly mentioned as a separate fundamental right in the Indian Constitution. However, the Supreme Court has recognised it as an essential part of the freedom of speech and expression guaranteed under Article 19(1)(a).
Freedom of the press includes:
-
Freedom to publish news and opinions.
-
Freedom to conduct investigative journalism.
-
Freedom to criticise government policies.
-
Freedom to report corruption and misuse of public funds.
-
Freedom to disseminate information in the public interest.
However, Article 19(2) permits reasonable restrictions on freedom of speech and expression on specified grounds, including public order, defamation, security of the State and other constitutionally recognised interests.
Therefore, press freedom is important but not absolute.
5. Right to Privacy Under Article 21
The right to privacy is recognised as a fundamental right under Article 21 of the Constitution.
In the landmark judgment of Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), a nine-judge Constitution Bench of the Supreme Court unanimously recognised privacy as a constitutionally protected fundamental right.
The judgment established that privacy is closely connected with personal liberty, dignity and individual autonomy.
For journalists, this creates an important responsibility. Publishing someone's personal information without a legitimate public interest may violate privacy and cause reputational or personal harm.
For example, publishing the private medical records, home address or personal financial details of an individual without justification may raise serious privacy concerns.
6. How Can the DPDP Act Affect Journalists and Media Organisations?
The DPDP Act raises important questions about how journalists and media organisations collect, use and publish personal information.
Consider a journalist investigating corruption involving a public official. The investigation may require collecting personal data, examining documents, communicating with sources and publishing information relevant to public accountability.
This creates several possible areas of conflict.
A. Collection of Personal Information
Journalists frequently collect personal information through interviews, documents, public records and digital sources. Data protection requirements could create compliance concerns where the collection or processing falls within the Act.
B. Investigative Journalism
Investigative reporting often requires examining the activities of powerful individuals and institutions. If journalists face uncertainty about the lawful processing of personal data, it could discourage investigations into matters of public importance.
C. Protection of Confidential Sources
Journalists depend on confidential sources to expose corruption, administrative failures and wrongdoing. Protecting these sources is essential for independent journalism.
D. Digital News Platforms
Online news portals collect information through website registrations, newsletters, subscriptions and user accounts. Their activities involving personal data may create obligations under the DPDP framework.
An important legal distinction must be understood: the Act does not expressly provide a blanket exemption for all journalism. Section 17 contains specified exemptions, but journalists and media organisations cannot automatically assume that every activity undertaken for news reporting is exempt.
7. Section 17: Exemptions Under the DPDP Act
Section 17 of the DPDP Act deals with exemptions from certain provisions of the legislation.
It provides exemptions in specified situations, including:
-
Processing necessary for enforcing legal rights or claims.
-
Processing by courts and certain legally authorised bodies.
-
Certain processing connected with prevention, detection, investigation or prosecution of offences.
-
Processing necessary for research, archiving or statistical purposes, subject to prescribed conditions.
These exemptions are important because they recognise that personal data may sometimes need to be processed for legitimate legal, administrative and public purposes.
However, the Act does not create a general exemption simply because an organisation describes its activity as journalism.
This is one of the central issues in the debate surrounding privacy and freedom of the press.
8. Important Supreme Court Judgments
The following judgments help law students understand the constitutional relationship between privacy and freedom of expression.
1. Romesh Thappar v. State of Madras, 1950
The Supreme Court recognised the importance of freedom of speech and expression and held that restrictions on circulation of a publication must satisfy constitutional requirements.
Legal importance: It established an important foundation for press freedom in India.
2. Bennett Coleman & Co. v. Union of India, 1973
The Supreme Court examined restrictions affecting newspaper circulation and recognised that freedom of the press includes the freedom to publish and circulate newspapers.
Legal importance: Government restrictions affecting the functioning of newspapers may violate Article 19(1)(a).
3. Justice K.S. Puttaswamy v. Union of India, 2017
The nine-judge Bench recognised the right to privacy as a fundamental right under the Constitution.
Legal importance: It established constitutional protection for personal privacy and dignity.
These judgments demonstrate that both privacy and freedom of the press have significant constitutional importance.
9. DPDP Rules, 2025: What Has Changed?
The Central Government notified the Digital Personal Data Protection Rules, 2025 on 14 November 2025.
The Rules provide the procedural framework for implementing the Act, including requirements relating to consent notices, security safeguards, individual rights and organisational responsibilities.
Importantly, implementation is phased. Not every substantive provision became enforceable immediately upon notification.
Under the commencement notification dated 13 November 2025, several provisions were brought into force immediately, while major substantive provisions, including Sections 3 to 17, are scheduled to commence eighteen months after publication, on 14 May 2027.
Section 44(3), which amends the Right to Information Act, 2005, was among the provisions brought into force immediately.
This amendment changes the wording of Section 8(1)(j) of the RTI Act concerning personal information. It has generated debate about the possible effect on access to government-held information and public accountability.
10. Balancing Privacy and Freedom of the Press
India needs a legal framework that protects individuals from unauthorised use of their personal information without weakening independent journalism.
A balanced approach should consider the following principles:
-
Public Interest: Information exposing corruption, abuse of power or public misconduct should receive appropriate protection under applicable constitutional and statutory principles.
-
Proportionality: Restrictions on information processing should be proportionate to the legitimate objective of protecting privacy.
-
Source Protection: Journalists should be able to protect confidential sources, subject to applicable law.
-
Transparency: Government institutions should maintain transparency and accountability.
-
Responsible Journalism: Media organisations should avoid unnecessary disclosure of sensitive personal information.
The objective should not be to place privacy and press freedom against each other, but to ensure that both rights coexist in a democratic society.
11. Conclusion
The Digital Personal Data Protection Act, 2023 represents an important development in India's data protection framework. It recognises the importance of protecting personal information in an increasingly digital society.
However, the relationship between privacy and freedom of the press requires careful consideration. Investigative journalism plays an essential role in exposing corruption, protecting democracy and holding public authorities accountable.
While privacy deserves constitutional protection under Article 21, freedom of expression under Article 19(1)(a) must also be safeguarded.
The real challenge for India is to develop a legal framework that protects individual privacy without unnecessarily restricting public-interest journalism.
The ultimate question is not whether privacy is more important than press freedom, but how both constitutional values can be protected together.
12. Important Questions for LLB Examination
-
Explain the objectives and major provisions of the DPDP Act, 2023.
-
Discuss the relationship between Article 19(1)(a) and Article 21.
-
Explain the importance of Section 17 of the DPDP Act.
-
Discuss the impact of data protection laws on investigative journalism.
-
Explain the significance of the Puttaswamy judgment, 2017.
-
Can privacy restrictions affect freedom of the press in India? Discuss.
