Neither the right to privacy nor the right to information/ What data protection Bill says on privacy, Centre's powers, right to info

Contact Counsellor

Last Updated09/08/2023

Recently, the Government passed the Digital Personal Data Protection (DPDP) Bill, 2023.

This industry response to the Bill reveals the real purpose of the Bill, legalising data mining rather than safeguarding the right to privacy.
- The right to privacy was reaffirmed by a nine-judge Constitutional bench of the Supreme Court in 2017.
The right to information provides us access to government documents to ensure transparency and accountability of the government.
Enacted as a law, the Right to Information Act (RTI) 2005 has played a critical role in deepening democratic practices.
The much-awaited DPDP Bill 2023 ends up undermining our right to information, without doing much to protect our right to privacy.

The right to information seeks to make the government transparent to us.
The right to privacy is meant to protect us from government (and increasingly, private) intrusions into our lives.
In a crucial way, the two rights complement each other.
Yet, there are some tensions between the right to information and the right to privacy.
Recently introduced DPDP Bill 2023 makes little attempt to deal with these hard questions.
Instead, it makes the government less transparent to us while making us transparent to both the government and private interests.

The Right to Information Act 2005 anticipated some of these tensions and the consequent need to limit its own reach.
Therefore, Section 8 of the RTI 2005 listed situations where “exemption from disclosure of information” would be granted.
It set a high benchmark for exemption “information which cannot be denied to the Parliament or a State Legislature shall not be denied to any person”.
The DPDP Bill 2023 suggests replacing Section 8(1)(j) with just “information which relates to personal information”.
This will undermine the RTI 2005.

The Data Protection Board, an oversight body will be under the boot of the government as the chairperson and members are to be appointed by the central government.
The DPDP Bill 2023 attempts to pass off a lame-duck as a watchdog.
In Europe, the General Data Protection Regulation (GDPR) sets a high standard for data protection.
It has a strong watchdog that operates in a society with universal literacy, and high digital and financial literacy.
Restricting data collection is not even being discussed in India.

A weak board combined with the lack of universal literacy and poor digital and financial literacy, as well as an overburdened legal system, mean that the chances that citizens will be able to seek legal recourse when privacy harms are inflicted on them are slim.