India’s leading news publishers are challenging Prime Minister Narendra Modi’s digital privacy law, warning that its provisions could undermine investigative journalism, expose confidential sources and give authorities greater leverage over independent media.
The Digital Personal Data Protection Act is scheduled to come into force next year. Media organisations, including outlets associated with billionaires Mukesh Ambani and Gautam Adani, argue that the legislation fails to provide adequate exemptions for journalism, unlike privacy frameworks in the European Union, Britain and Singapore.
The dispute centres on how the law balances individual privacy rights with the public interest in reporting on corruption, misconduct and other sensitive issues.
The government says it respects press freedom and has previously assured publishers that their concerns would be addressed. However, media groups say verbal assurances are insufficient without explicit legal protections for journalists.
Stay ahead of the geopolitical week.
MD Briefing delivers expert analysis across five global fronts — the Indo-Pacific, energy, geoeconomics, European security, and the Middle East — every Monday morning. Free.
The Digital News Publishers Association (DNPA), which represents news organisations, has challenged the legislation in court, arguing that several provisions could interfere with routine reporting and create opportunities for the identification of confidential sources.
1. Could Privacy Rules Obstruct Investigative Journalism?
The law requires organisations processing individuals’ digital personal data to notify them and obtain their consent, subject to specified exceptions. Although research, archiving and statistical activities receive certain exemptions, journalism is not explicitly exempt.
Publishers argue that applying these requirements to investigative reporting could alert the subjects of investigations before journalists have gathered sufficient evidence or published their findings.
According to the DNPA, notifying an individual that their personal data is being used in an investigation could give that person an opportunity to destroy evidence, intimidate witnesses or otherwise obstruct reporting.
The concern is particularly significant in investigations involving powerful political figures, business executives and public officials, where advance disclosure could compromise the reporting process.
The dispute therefore raises a fundamental question: how can privacy protections prevent the misuse of personal information without obstructing journalism that serves a legitimate public interest?
2. Could Individuals Force Newsrooms to Remove Published Stories?
The legislation also grants individuals the right to withdraw consent. Organisations holding their personal data must then stop processing it within a reasonable period and erase it, unless another law requires its retention.
News publishers fear that individuals featured in investigative reports could use this provision to pressure newsrooms into removing or substantially editing previously published material.
The DNPA argues that such requests could be used not to protect legitimate privacy interests but to burden publishers and discourage reporting.
Media organisations are also concerned about the potential consequences for the public record. Investigative reports may document corruption allegations, corporate misconduct or other matters of public importance. Removing or heavily redacting those reports could make it harder for citizens to access information about past events.
The central issue is whether individuals’ rights over their personal data should extend to compelling changes to accurate, lawfully published journalism.
Without a clear exemption or safeguards for public-interest reporting, publishers fear that privacy claims could become an additional mechanism for challenging uncomfortable disclosures.
3. Why Are Journalists Worried About Confidential Sources?
One of the most contentious provisions allows the government to require organisations handling personal data to provide information it requests. Where disclosure could harm national security, an organisation may also be prohibited from informing the affected individual about the request.
Publishers argue that these powers could extend to news organisations and information that might reveal a journalist’s confidential sources.
In their court filing, the publishers describe the provision as an insufficiently constrained power because it does not require prior judicial approval. They warn that authorities could potentially use it to identify and target people who provide information to reporters.
Confidential sources play an important role in investigative journalism, particularly when individuals disclose evidence of wrongdoing but fear professional retaliation, legal consequences or personal threats.
If potential whistleblowers believe their identities could be exposed through government data requests, they may become less willing to cooperate with journalists.
The publishers’ concern is therefore broader than the privacy of individual reporters. They argue that the provision could weaken the ability of news organisations to investigate matters involving government institutions and powerful private actors.
4. Could Heavy Fines Threaten Independent Media?
The legislation empowers a federal Data Protection Board to impose fines of up to 2.5 billion Indian rupees, approximately $26.26 million, for non-compliance.
The DNPA argues that penalties of this scale could threaten the survival of smaller publishers, particularly regional, independent and digital-first outlets operating on limited budgets.
Large media companies may have greater resources to manage legal disputes and compliance costs. Smaller organisations, however, could struggle to absorb substantial penalties even when disputes concern the interpretation of complex data protection requirements.
The law also provides for possible content blocking. If an organisation has been fined at least twice and the board recommends blocking, the government can order its content blocked in the interests of the general public.
Publishers describe this provision as especially concerning because they believe the stated grounds could allow restrictions on speech without sufficiently precise limits.
The potential combination of substantial financial penalties and content-blocking powers has intensified concerns that the law could discourage critical reporting, even without an explicit prohibition on particular stories.
5. The Wider Debate Over Privacy and Press Freedom
India’s legal dispute reflects a broader challenge facing democracies as governments introduce stronger protections for personal data.
Privacy legislation can help prevent the misuse of sensitive information by businesses, institutions and other organisations. However, journalism frequently requires processing personal data without the subject’s consent, particularly when investigating alleged wrongdoing or holding powerful actors accountable.
The European Union, Britain and Singapore provide examples of jurisdictions where publishers point to specific protections or exemptions for journalistic activity within their data protection frameworks. India’s publishers argue that the absence of a comparable explicit safeguard leaves their work vulnerable to conflicting legal obligations.
The government’s position that it respects press freedom has not resolved the dispute. Publishers want those assurances translated into enforceable protections that clearly distinguish legitimate investigative reporting from harmful or unlawful uses of personal information.
The outcome of the court challenge could shape how Indian news organisations handle investigations, protect sources and preserve published material once the law takes effect.
Ultimately, the debate is about more than data protection compliance. It concerns whether privacy rules can be enforced without weakening journalism’s ability to scrutinise public officials, investigate powerful institutions and maintain an accessible historical record.
With information from Reuters.
