News Publishers Move SC To Challenge The DPDP Act

India’s Digital Personal Data Protection Act, enacted in August 2023, and its Rules, notified in November 2025, set duties for organisations handling digital personal data. They aim to protect privacy while creating consistent rules for data processing. This matters because the framework affects platforms, businesses and publishers that use information about individuals.

The framework generally requires organisations to obtain consent and clearly explain how data will be used. It also requires security safeguards. Individuals receive rights to access, correct, update and seek erasure of their personal data, subject to applicable provisions. Organisations can face large financial penalties for violations.

The Rules provide a phased implementation plan, giving organisations up to 18 months to meet specified requirements. Most disputed provisions are scheduled to take effect from May 2027. The framework is now being challenged because publishers say its privacy controls do not adequately address investigative journalism and public-interest reporting.

The challenge was filed by the Digital News Publishers Association, which represents 21 news publishers. Its members include Mukesh Ambani-owned Network18, Gautam Adani-owned NDTV, the Indian Express and Times Internet, part of the Times of India group. The case was filed on October 6 and is scheduled for hearing on October 27.

The publishers ask the Supreme Court to quash several contentious provisions of the DPDP framework. They object to consent requirements, data-erasure rights, government access to information and powers to restrict information access in the public interest. They say these provisions lack a specific exemption for journalistic activities.

The dispute matters because most challenged provisions are scheduled to take effect from May 2027. The publishers argue that the government has granted broad exemptions to the state without giving the press comparable protections. The government maintains that the framework protects privacy while supporting responsible data processing.

Publishers say consent rules could undermine investigations because journalists may need to collect and use personal information without warning the people being investigated. Their central concern is timing: advance notice could reveal an inquiry before reporters verify the facts or publish a story. This matters especially when reporting involves alleged wrongdoing.

The DNPA argues that asking investigation subjects for consent could allow them to destroy evidence. It could also give them time to intimidate witnesses. These risks could make it harder for journalists to investigate corruption, corporate wrongdoing or electoral malpractice. The concern is not simply administrative; it involves protecting the reporting process itself.

The publishers say the current framework does not provide a specific journalistic exemption or public-interest safeguard. They therefore fear that ordinary consent requirements could apply to investigative reporting. The Supreme Court challenge seeks to remove or change provisions that, in their view, could interfere with press freedom and reporting in the public interest.

Publishers say data-erasure rights could conflict with journalism’s need to preserve accurate public records. If a person asked for personal data to be removed, the absence of a public-interest safeguard could force a publisher to delete or substantially redact a factual news report. That could weaken the report’s completeness and accessibility.

They also object to provisions allowing the government to seek information from organisations handling personal data. The DNPA says such powers could expose confidential journalistic sources. A source who shares information about corruption, corporate wrongdoing or electoral malpractice may stop cooperating if stored information can later reveal their identity.

The publishers argue that these effects could damage investigative reporting and press freedom. Their filing also challenges government powers to restrict access to information in the public interest. The case will test how those powers interact with news reporting, although the article says the disputed provisions are mostly due to take effect from May 2027.

The DNPA is seeking a specific exemption for journalistic activities, or a public-interest safeguard covering reporting. Its aim is to ensure that privacy rules do not automatically override journalism when personal information is collected and published to expose wrongdoing. The publishers say the current framework fails to recognise investigative reporting as a distinct activity.

Under the current rules described in the article, organisations must generally obtain consent, explain data use and honour rights including correction, updating and erasure, subject to applicable provisions. Publishers fear these requirements could apply to news investigations without a clear journalism exception. They also challenge government access and information-restriction powers.

A journalistic safeguard would create a different balance for public-interest reporting. It could protect investigations from advance consent demands and prevent factual reports from being removed solely because of erasure requests. The article does not specify the exact legal wording sought. It says the DNPA wants several contentious provisions quashed and corresponding protections for the press.

The DPDP Act allows financial penalties reaching ₹250 Cr when organisations fail to implement reasonable security safeguards. Other violations, including certain breaches involving children’s personal data, can attract penalties of up to ₹200 Cr. These figures show why compliance matters for organisations processing digital personal data.

The Rules create a phased implementation framework rather than requiring every obligation immediately. Organisations receive up to 18 months to comply with specified requirements. The framework includes consent, clear information about data use, security safeguards and rights to access, correct, update and seek erasure.

The publishers are challenging several provisions, most of which are scheduled to come into effect from May 2027. Their concern is that large penalties could apply while journalism lacks a specific exemption or public-interest protection. The Supreme Court hearing is scheduled for October 27, and its consideration could shape how the framework applies to news organisations.

Data-protection systems generally try to protect people from improper use of personal information while preserving legitimate activities such as journalism. They do this through consent, transparency, security duties and individual rights to access, correct or erase data. Public-interest exceptions can prevent those rights from blocking reporting that exposes wrongdoing or informs society.

The article’s dispute illustrates the tension. Consent could alert investigation targets, while erasure requests could affect factual reports. Government access to stored information could reveal confidential sources. A balanced system would therefore distinguish ordinary data processing from reporting that serves a clear public interest, while still requiring responsible handling and security.

India’s framework provides privacy controls but, according to the DNPA, no specific journalistic exemption. The government says it protects privacy and supports responsible processing. The Supreme Court challenge may clarify whether the existing framework sufficiently balances individual control with investigative journalism, especially before most disputed provisions take effect in May 2027.