RTI Amendments: Balancing Transparency and Privacy, or Tilting Towards Secrecy?
On September 13, 2025, sharp criticism engulfed the amendment of Section 8(1)(j) of the Right to Information Act (RTI), 2005, via the Digital Personal Data Protection (DPDP) Act, 2023. The revised provision erased the public interest override, which had previously allowed disclosure of personal information when it served a larger public accountability goal. Ironically, this was justified under the banner of protecting citizens' right to privacy — a move some argue fundamentally undermines the transparency that the RTI Act was created to uphold.
The Shift in Balance: From Transparency to Privacy Overreach
What breaks precedent here is how the amendment reverses RTI’s original ethos of balancing conflicting rights. Until now, the Act’s Section 8(1)(j) had permitted disclosure of personal data if it served a “larger public interest.” Social audits of welfare schemes or investigations into corruption often relied on this provision. For instance, the 2019 Supreme Court judgment in Subhash Chandra Agarwal vs Supreme Court of India disclosed judges’ asset declarations under RTI, arguing public accountability outweighed privacy concerns. The DPDP Act now closes this window, creating an absolute bar on personal data disclosure, irrespective of public benefit.
The irony is hard to ignore: the government claims this amendment harmonizes transparency and privacy, but critics argue it skews heavily toward restricting information rights. Transparency risks being held hostage to the expansive definition of “personal data” under DPDP, which includes vague categories like “identifiable characteristics.” This leaves public authorities with greater discretion — and correspondingly, the citizen with fewer tools to hold the State accountable.
What Changed, and Who Decided?
The amendment stems directly from the DPDP Act, which was passed under the procedural framework of Article 254 (Union legislation overriding state laws) during the monsoon session of Parliament in 2023. The Ministry of Electronics and Information Technology piloted the DPDP Act, ostensibly to address challenges posed by unchecked data breaches and digital privacy violations, particularly following the Supreme Court’s landmark Justice K.S. Puttaswamy (Retd.) vs Union of India (2017) judgment that formally recognized privacy as a fundamental right under Article 21. However, RTI wasn’t under its scope, raising questions about why and how the Ministry and Parliament bundled transparency into the privacy legislation.
The Data Protection Board of India — the adjudicating body under DPDP — now holds enforcement powers over appeals. This creates an institutional friction point: RTI disputes on personal data disclosure will theoretically fall under this Board’s jurisdiction, despite Information Commissions historically handling such challenges. Is this a case of overlapping mandates, or deliberate bureaucratic consolidation?
The Numbers Don't Lie: What Happens to Accountability?
The broader implications of this amendment need scrutiny. Consider these:
- Between 2006 and 2021, over 2.5 million RTI appeals were filed nationwide — a significant proportion sought disclosures of public officials’ actions, assets, and decisions.
- The RTI Act has pulled back the curtain on endemic corruption, including high-profile revelations like the Adarsh Housing Society scam or irregularities in MNREGS implementation, aided by the larger public interest safeguard.
- On the other hand, the DPDP Act provides zero budget allocations for capacity-building within State Information Commissions, despite expecting them to adjudicate complex privacy disputes in parallel.
These numbers hint at troubling outcomes. Public Information Officers (PIOs), often compelled under RTI to disclose contested data, may now claim exemptions under DPDP. This risks diluting the spirit of Section 4 of RTI — which mandates proactive disclosure by public authorities.
Uncomfortable Questions: Citizens Left Guarding a Hollow Act?
The government’s position pivots on balancing fundamental rights, yet several questions remain unanswered. First, what measurable criteria distinguish RTI disclosures from DPDP privacy protections? Without clarifying definitions of “personal information,” the scope of exceptions under RTI grows dangerously discretionary. Second, why has the autonomy of Information Commissions been sidelined? While the RTI framework envisioned these quasi-judicial bodies as gatekeepers, the new amendment potentially fragments their adjudicatory powers by introducing secondary institutional actors like Data Protection Officers under DPDP.
Implementation capacity is another blind spot. Across states, Information Commissions vary in strength — 7 states lacked full-time Commissioners as of 2022. With DPDP creating additional burdens, will weaker Commissions collapse altogether?
Comparative Insight: South Korea's Balancing Act
South Korea offers an instructive contrast. Its Public Information Act (PIPA) enables citizens to access government data while protecting individual privacy under the Personal Information Protection Act. Notably, Section 14 of PIPA explicitly exempts public servants’ official acts and financial disclosures from privacy protection. The logic is simple: citizens have the right to scrutinize their tax-funded representatives. India's DPDP Act misses this critical differentiation, treating bureaucratic actions and personal data as indistinguishable — a troubling precedent.
Practice Questions for UPSC
Prelims Practice Questions
- Statement 1: The amendment allows for greater public access to personal information.
- Statement 2: The public interest override provision in the RTI Act has been removed.
- Statement 3: The Data Protection Board of India has taken over all RTI disputes.
Which of the above statements is/are correct?
- Statement 1: It increases the number of RTI applications.
- Statement 2: It introduces an absolute bar on personal data disclosure.
- Statement 3: It strengthens the autonomy of State Information Commissions.
Which of the above statements is/are correct?
Frequently Asked Questions
What criticism has been directed towards the amendment of Section 8(1)(j) of the RTI Act by the DPDP Act?
The amendment has been criticized for erasing the public interest override that previously allowed personal information to be disclosed in cases serving larger accountability goals. Critics argue that this change undermines the transparency intended by the RTI Act, effectively tilting the balance towards privacy at the expense of public access to information.
How does the amendment of the RTI Act conflict with previous Supreme Court judgments regarding public accountability?
The amendment conflicts with prior judgments, such as the 2019 ruling in the Subhash Chandra Agarwal case, which emphasized the importance of public accountability over privacy concerns. By introducing an absolute bar on personal data disclosure regardless of public interest, it contradicts the precedent that allowed such disclosures when justified.
What institution has been created under the DPDP Act, and what tension does its role introduce in relation to RTI disputes?
The Data Protection Board of India is established under the DPDP Act to adjudicate privacy matters, introducing potential friction as it overlaps with the responsibilities of Information Commissions, which previously handled RTI disputes. This raises concerns about bureaucratic consolidation and the autonomy of RTI adjudicators.
What implications does the DPDP Act have for the capacity of State Information Commissions to handle RTI disclosures?
The DPDP Act lacks budget allocations for the capacity-building of State Information Commissions, despite them needing to address complex privacy disputes. This could exacerbate existing weaknesses in these Commissions, many of which already lack adequate resources, potentially leading to a compromised ability to enforce transparency.
What are some concerns regarding the ambiguity of 'personal information' as defined in the DPDP Act?
The vague definition of 'personal data' under the DPDP Act, including categories like 'identifiable characteristics,' raises concerns over widened discretion for public authorities. This ambiguity can lead to increased barriers for citizens seeking information, ultimately undermining the accountability that the RTI Act was meant to promote.
Source: LearnPro Editorial | Polity | Published: 13 September 2025 | Last updated: 3 March 2026
About LearnPro Editorial Standards
LearnPro editorial content is researched and reviewed by subject matter experts with backgrounds in civil services preparation. Our articles draw from official government sources, NCERT textbooks, standard reference materials, and reputed publications including The Hindu, Indian Express, and PIB.
Content is regularly updated to reflect the latest syllabus changes, exam patterns, and current developments. For corrections or feedback, contact us at admin@learnpro.in.