#DPDP Act Journalism Exemption: 21 Publishers Challenge the Law in the Supreme Court

Twenty-one of India's biggest news publishers have asked the Supreme Court to strike down the parts of the DPDP Act that are due to take effect in May 2027, arguing that the law has no journalism exemption and would leave investigative reporting "benign and neutered." The petition, filed on 6 October and surfaced by Reuters on 26 October, was listed for hearing before a bench led by Chief Justice Surya Kant on 27 October. No outcome had been reported at the time of writing.

It matters beyond newsrooms. Whatever the Court decides about journalism will shape how consent, erasure and government information-gathering powers work for every business that holds personal data.

#Who filed, and what they want

The petition comes from the Digital News Publishers Association (DNPA), which represents 21 publishers. Network18, NDTV, The Indian Express and Times Internet are among its members. According to Storyboard18's report, the filing runs to 698 pages and asks the Court to strike down the contentious provisions scheduled to commence from May 2027. It attaches an August letter to the government making the same case, and points to journalism safeguards in the European Union, Singapore and the United Kingdom as models India could follow.

The reports I found do not list the specific sections under challenge, so the mapping below is my reading of the arguments against the Act's text, not a quotation from the petition.

#The DNPA's core arguments

Based on Inc42, Odisha Bytes and Storyboard18, the publishers make five points.

1. No journalism exemption. The DPDP Act exempts the State and certain processing categories, but nothing in it carves out reporting. The DNPA says that omission sits uneasily with government assurances that press freedom would be protected, and with Article 19(1)(a).

2. Consent could tip off the subject of a story. A fiduciary must have a lawful basis to process personal data, and for most commercial processing that basis is consent. The publishers argue that if a reporter must notify and seek consent from the person being investigated, the subject can destroy evidence or intimidate witnesses.

3. Erasure and withdrawal of consent. Data principals can withdraw consent and ask for erasure. Without a public-interest safeguard, the DNPA says, publishers could be forced to remove or heavily redact accurate reports already in the public domain.

4. Source exposure. The Central Government can call for information from a data fiduciary. Newsrooms fear that power could be used to compel them to identify confidential sources and whistleblowers.

5. Blocking powers. The government's power to block information in the public interest, the petition says, has inadequate safeguards for the press. The filing calls the combined effect "pre-censorship which is anathema to any democracy worth its name."

#What the Act actually says, and why the gap exists

Section 17 of the DPDP Act lists the exemptions: processing for enforcement of legal rights, for prevention and investigation of offences, by certain State instrumentalities notified by the government, for research and statistics, and a few others. Journalism is not on the list. The 2018 draft Bill from the Justice Srikrishna Committee did contain a journalistic-purposes exemption; the 2023 Act dropped it.

Two other features matter. First, the Act covers only digital personal data, and Section 3 excludes personal data processed for purely personal or domestic purposes and data made publicly available by the data principal or under a legal obligation. Publishers will argue about how much of a news archive falls inside that net. Second, the substantive obligations on notice, consent and erasure are not yet live. Under the DPDP Rules, 2025, notified on 13 November 2025, the Data Protection Board provisions took effect immediately, the consent manager provisions follow after 12 months, and most remaining duties after 18 months, which gives a May 2027 date.

#Not the first challenge

The DNPA petition joins a batch of constitutional challenges already before the Court. In March, the Supreme Court issued notice on a plea by journalist Geeta Seshu and SFLC.in, which attacks Section 17's State exemptions, the Board's independence and the missing journalism carve-out.

The Court has also been hearing the separate challenge to the DPDP Act's amendment of the RTI Act. On 7 August, according to SC Observer's report, counsel argued that journalists would need a data principal's consent before publishing and would have to erase on request. CJI Surya Kant responded that "the balance has to be worked out with the right to privacy." Justice Bagchi observed that the RTI Act "operates in a much larger domain" than the DPDP Act and that the Court would test whether the two operate harmoniously. Solicitor General Tushar Mehta said the Union would file its reply within two weeks and that the legislation remains "subject to judicial review." We covered that litigation in our earlier piece on the RTI challenge.

The pattern is worth noticing: each petition arrives from a different direction, but all of them ask where the Act's privacy interest stops and the public interest begins.

#What could happen next

The Court has several options, and none is certain.

• Read-down. The Court could hold that journalism is protected by Article 19(1)(a) and read a public-interest or journalistic-purpose limit into the consent and erasure provisions without striking anything down. That is the least disruptive route and fits Justice Bagchi's remark that neither the RTI Act nor earlier precedent creates a stand-alone journalist exemption beyond the Article.
• Direct the government to notify an exemption. Section 17(3) already lets the Centre exempt classes of fiduciaries. The government could use that power, or amend the Act, to add a journalistic carve-out before May 2027.
• Tag the petition with the existing batch and let a larger bench decide everything together. Interim relief, such as a stay of the May 2027 provisions for publishers, is possible but unlikely given how the Court has handled the earlier interim requests.
• Dismiss as premature, because the provisions are not yet in force.

Because the contested duties begin in about six months, the timing pressure is real. Watch for the Union's counter-affidavit and whether the Court lists this petition together with the earlier batch.

#What this means for businesses

If you are not a publisher, you might think this is someone else's fight. It is not, for three reasons.

Erasure scope. How the Court draws the line between a data principal's erasure right and a legitimate public record will set the template for any fiduciary holding information it has a legal or journalistic reason to keep, including fact-checkers, credit bureaus, background-verification firms and media-adjacent platforms.

Government information requests. The same call-for-information power the DNPA fears applies to every fiduciary. Companies should already be deciding who handles such requests, what gets logged, and what legal review happens first.

Consent design. If the Court narrows consent for investigative or public-interest processing, other categories may follow. Companies building consent flows now should keep them modular rather than hard-coding assumptions that a ruling could invalidate. A consent manager architecture that separates purpose, lawful basis and retention logic makes that easier.

Publishers themselves should not wait for the ruling. Practical steps include mapping personal data in archives and reader databases, separating editorial from commercial processing (subscriptions, newsletters, ad targeting, which fall squarely inside the Act), and documenting the public-interest basis for retaining sensitive reporting data.

#What this means for citizens

For readers and the people who appear in stories, the case is a real trade-off, not a side show. The right to correct or erase your data is one of the Act's main promises, and a broad journalism exemption could blunt it for anyone written about in the press. The publishers' counter is that accurate reporting on public officials and companies is the very thing privacy law should not erase. Expect the Court to try to hold both ideas at once.

#Bottom line

The DNPA petition is the strongest institutional challenge so far to the DPDP Act's design, because it comes from organisations with the resources to litigate it through to a final judgment. Until the Court rules or the government acts, the law as written has no journalism exemption, and the May 2027 date is closer than it looks. Businesses should follow the case, because the Court's reasoning on consent, erasure and State information powers will apply well beyond newsrooms.

DPDPBot helps organisations map personal data, vendors and lawful bases ahead of the May 2027 phase. Explore our compliance resources to build a readiness plan, and see how a consent manager fits into your wider DPDP architecture.

This article is general information, not legal advice. Details of the petition come from press reports; the filing itself was not reviewed, and the hearing outcome was not available when this was written.