21 publishers challenge India’s privacy law over journalism risks

A coalition of 21 Indian publishers has asked the Supreme Court to examine parts of the country’s Digital Personal Data Protection Act. The case, filed on October 6 by the Digital News Publishers Association, argues that duties designed to protect privacy could interfere with investigations, news archives and confidential sources if they apply to the press without a specific exemption.

The groups associated with the challenge include companies behind Network18, NDTV, The Indian Express and Times Internet. Reuters and The Indian Express reported the case after reviewing a confidential petition. Its claims represent the publishers’ legal position, not a finding by the Supreme Court. An initial hearing is expected on October 27, and the court has not ruled on the merits.

What the law does

India enacted the Digital Personal Data Protection Act in 2023 to govern the processing of personal information in digital form. It recognizes rights for individuals and imposes duties on organizations that collect and use their data. Implementing rules published by the Ministry of Electronics and Information Technology in November 2025 introduced a phased timetable; central provisions cited in the challenge are scheduled to take effect in May 2027.

The law’s stated purpose is to balance privacy protection with lawful uses of data. The dispute does not reject that objective. It focuses on whether general rules, applied without safeguards tailored to journalism, could restrict reporting on matters of public interest.

What the publishers say is at risk

According to accounts of the filing, a duty to obtain consent or notify a data subject could alert someone who is being investigated before publication. Later requests to withdraw consent or erase data could, in the publishers’ view, create pressure to remove or alter accurate stories and historical records. The coalition also argues that official powers to demand information could provide a route to identifying confidential sources.

Those effects have not been established by a court and will depend on how the law is interpreted and enforced. Nor does the challenge mean that every correction or erasure request is incompatible with journalism. The narrower legal question is how individual data rights should coexist with source protection, preservation of the public record and reporting on issues that affect society.

Official documents confirm the statute and its implementation schedule, but the full petition is not public. Details of the publishers’ arguments should therefore be understood as attributed accounts of a filing reviewed by news organizations. The responsible ministry and the publishers named in the coverage did not respond to requests for comment before those reports were published.

Why the case matters

The proceedings could set an important standard for privacy and press freedom in the world’s largest digital market by population. A journalism safeguard would not necessarily eliminate data rights. It could be limited to genuine public-interest work and paired with security, accuracy and accountability duties.

Until the Supreme Court rules, the case presents competing risks. Citizens need remedies against improper collection and harmful exposure of their personal data. Broadly written requirements, however, could encourage self-censorship, erase legitimate records or weaken source confidentiality. The court’s response may show whether the current framework provides a workable balance or whether lawmakers and regulators need a more precise exemption before May 2027.