The Empty Vessel, How India’s Data Protection Act is Systematically Dismantling the Right to Information

The Empty Vessel, How India’s Data Protection Act is Systematically Dismantling the Right to Information

In the bustling town of Beawar in central Rajasthan, a unique moniker has taken root: “RTI City.” This is not merely a slogan but a testament to a profound democratic struggle. It was here, in 1996, that a people’s movement ignited, demanding transparency and accountability from a state shrouded in secrecy. This struggle, sustained for years by ordinary citizens, farmers, and labourers, culminated in a landmark victory: the Right to Information (RTI) Act of 2005. For two decades, this law has been celebrated as one of the world’s most powerful tools for citizen empowerment, fundamentally redefining the relationship between the Indian state and its people. Yet, today, Beawar stands at another historical crossroads, not of celebration, but of profound apprehension. The very government that is the custodian of this law has enacted another—the Digital Personal Data Protection Act (DPDPA) of 2023—which threatens to hollow out the RTI Act, leaving citizens with the shell of a right but without its substantive power. This is the story of how a law designed to protect privacy is being weaponized to obscure accountability, and how a people’s movement is preparing to fight back.

The Triumph of Beawar: A People’s Law is Born

The genesis of the RTI Act is a cornerstone of modern Indian democracy. It was not a gift from the government but a hard-won concession extracted through relentless grassroots mobilization. The Mazdoor Kisan Shakti Sangathan (MKSS), a grassroots organization, spearheaded this movement, using public hearings, or jan sunwais, to expose corruption and misuse of public funds at the local level. Their central demand was simple yet revolutionary: the citizen’s right to know how their government functions and how their money is spent.

The movement’s epicentre was Beawar, where a sustained protest at Chang Gate became a symbol of this demand. The pressure built until, in 2005, the Indian Parliament enacted the Right to Information Act. This was not just a law; it was a radical shift in governance philosophy. It operationalized the idea that in a democracy, the government is the servant and the citizen is the master, and the servant must be accountable to the master. The RTI Act empowered any citizen to request information from a public authority, which was legally bound to provide it, with limited and narrowly defined exemptions.

The RTI Act’s power lay in its design. It was citizen-centric, low-cost, and time-bound. More importantly, it contained a crucial provision: “Provided that the information that cannot be denied to a legislator or Parliament, cannot be denied to a citizen.” This clause explicitly equated the ordinary citizen with the highest elected representatives, a truly transformative principle in a society with deep-seated hierarchies. It became a potent weapon against corruption, enabling citizens to uncover scandals, track welfare schemes, demand entitlements, and hold officials accountable for their acts of both “omission and commission.”

Beawar’s recent decision to build an RTI Museum and memorial at Chang Gate is a tribute to this history. It is an effort to enshrine the people’s contribution to democracy and to inspire future generations. The first RTI Mela held at the site was meant to be a celebration of this living legacy. Yet, the festivities were overshadowed by a looming threat, turning the occasion into a somber reflection on the future of transparency itself.

The Digital Siege: The DPDPA’s Assault on the RTI

The Digital Personal Data Protection Act was passed by Parliament in 2023, ostensibly to safeguard the privacy of Indian citizens in the digital age. While the need for data protection is undeniable and urgent, the specific provisions of the DPDPA, particularly Section 44(3), have been crafted in a manner that systematically undermines the RTI Act.

The core of the conflict lies in the amendment to Section 8(1)(j) of the RTI Act. The original section was a masterful piece of legal drafting that balanced the right to information with the right to privacy. It exempted from disclosure “information which relates to personal information the disclosure of which has no relationship to any public activity or interest, or which would cause unwarranted invasion of the privacy of the individual.” The critical nuance here was the phrase “which has no relationship to any public activity or interest.” This meant that personal information could indeed be disclosed if it was related to a public activity. For instance, the name and details of a government officer sanctioning a contract, or a beneficiary of a public scheme, were not considered private because these were acts performed in a public capacity.

The DPDPA, through its amendment, deletes this crucial qualifier. It imposes a blanket prohibition on the disclosure of any “personal information.” The devastating effect of this change is clear: it severs the vital link between a public official’s actions and their accountability for those actions. As the activists Nikhil Dey and Aruna Roy poignantly illustrate, the government has “made a hole at the bottom of the vessel, so that everything of meaning is leaked out, and we are left holding an empty vessel called the RTI.”

The Consequences of an “Empty Vessel” RTI:

1. Shielding Corruption: An RTI query asking, “Which officials approved the substandard construction of this bridge?” could be denied because it seeks “personal information.” The names of the corrupt would be protected under the guise of privacy.

2. Neutralizing the Public Interest Override: The original RTI Act contained a powerful public interest override in Section 8(2), which allowed for the disclosure of exempted information if the larger public good demanded it. The DPDPA shifts this discretionary power entirely to the government, stripping citizens of the right to argue for disclosure in the public interest.

3. The Death of the Equality Clause: The landmark provision equating a citizen’s right to information with that of a Parliamentarian has been unceremoniously deleted. This symbolic and practical heart of the RTI Act has been ripped out, re-establishing a hierarchy of access to information that privileges the powerful over the ordinary person.

Beyond RTI: The Chilling Effect on Free Expression and Journalism

The damage wrought by the DPDPA extends far beyond the realm of RTI. The Act contains draconian provisions that pose a severe threat to freedom of expression and the press. It effectively gags anyone from processing or revealing personal data without the explicit consent of the individual concerned. While this sounds reasonable in theory, in practice, it means that a journalist exposing corruption by a public servant, an academic writing a critical study, or a citizen posting a video of official misconduct could be accused of violating the law.

The Act threatens staggering fines of up to ₹250 crore for such violations. This creates a powerful chilling effect, deterring investigative journalism and public scrutiny. A law that should have primarily regulated data-processing corporations like Facebook and Google has been designed to apply to all citizens, effectively muzzling dissent and whistleblowing. It is a legal sledgehammer that can be used to silence any revelation of truth that embarrasses the powerful, under the pretext of protecting “personal data.”

A Democratic Deficit: Ignoring the People’s Voice

What makes this legislative maneuver even more egregious is the government’s refusal to engage in genuine democratic consultation. The authors note that more than 150 Members of Parliament, over 2,500 journalists, 22 national journalists’ associations, and countless civil society organizations submitted strong, detailed objections to the draft of the DPDPA. Their concerns about its impact on the RTI Act and free speech were largely ignored. The passage of the Act represents a triumph of executive will over democratic deliberation, a process where the voices of those who fought for transparency were systematically sidelined.

The Fight Ahead: The Museum as a Beacon of Resistance

In the face of this formidable challenge, the spirit of Beawar offers a glimmer of hope. The RTI Museum being built there is not intended as a mausoleum for a dead law. On the contrary, it is conceived as a “living space that will inspire more and more battles for open and accountable government.” The movement that birthed the RTI Act is preparing for a new struggle.

The battle will be fought on multiple fronts:

• Legal Challenges: The constitutionality of the DPDPA’s amendments to the RTI Act is likely to be challenged in the Supreme Court, arguing that they violate the fundamental right to freedom of speech and expression and the principles of accountability inherent in a democracy.

• Public Awareness and Mobilization: Grassroots organizations like the MKSS will continue to educate citizens about the implications of the new law and mobilize public opinion to defend their right to know.

• Strategic Use of the RTI: Activists will continue to file RTI requests, testing the new boundaries and forcing public authorities to justify their refusals, thereby creating a public record of the law’s misuse.

The government may have the power to amend a statute, but as history has shown, it cannot so easily extinguish a movement born from the people’s will. The story of the RTI is a testament to the power of collective action. The DPDPA has thrown down a gauntlet, and the citizens of “RTI City” and beyond are poised to pick it up. The struggle for transparency in India has entered its most critical phase, a battle to ensure that the vessel of RTI does not remain empty, but is once again filled with the power of an informed and sovereign citizenry.

Q&A: The RTI-DPDPA Conflict Unpacked

1. How exactly did the original RTI Act balance the right to information with the right to privacy?

The original RTI Act, in Section 8(1)(j), exempted “personal information” from disclosure, but only if its release had “no relationship to any public activity or interest.” This was the key balancing mechanism. It recognized that when an individual acts in a public capacity—as a government officer disbursing funds, a contractor building a public road, or a beneficiary of a taxpayer-funded scheme—their actions cease to be purely private. Therefore, information about their performance, decisions, or benefits received could be disclosed to ensure public accountability. The DPDPA removes this critical distinction, making all personal information sacrosanct, regardless of its connection to public life.

2. The DPDPA is a data protection law. Why is it being applied to journalists and activists, not just tech companies?

The DPDPA defines “data fiduciary” broadly as any person who alone or in conjunction with others determines the purpose and means of processing personal data. This definition is not limited to large corporations. A journalist collecting information on a corrupt official, an activist compiling a list of beneficiaries denied their rights, or a citizen filming police brutality is technically processing personal data. The law’s severe penalties (fines up to ₹250 crore) apply to these individuals just as they would to a tech giant, creating a powerful deterrent against investigative work and public exposure of wrongdoing.

3. What is the significance of deleting the clause that equated a citizen’s right to information with that of a Parliamentarian?

This deletion is both symbolically and practically devastating. Symbolically, it dismantles the principle of democratic equality that was at the core of the RTI Act. It reinstates a colonial-era mindset where the rulers have privileges inaccessible to the ruled. Practically, it means that information that can be accessed by MPs in Parliament—often detailed reports on scams, military procurements, or administrative failures—can now be legally denied to an ordinary citizen filing an RTI, creating a two-tiered system of transparency that protects the powerful from public scrutiny.

4. The government argues the DPDPA is necessary for privacy. Is there no way to protect privacy without killing the RTI?

Absolutely. The original framework of the RTI Act already provided a robust model for protecting genuine privacy while upholding accountability. The solution was not to impose a blanket ban but to strengthen the existing public interest test. The DPDPA could have included clear, narrow definitions of what constitutes personal data in a public context and established independent, transparent mechanisms to adjudicate disputes. Instead, it chose the most heavy-handed approach, using privacy as a pretext to roll back transparency. Effective data protection and a functioning RTI regime are not mutually exclusive; the former requires carefully crafted exceptions for journalism, academia, and public accountability, which the DPDPA glaringly lacks.

5. With the law already passed, what can ordinary citizens and activists do now?

The fight is far from over. Citizens and activists can:

• Engage in Legal Activism: Support and contribute to public interest litigation (PIL) challenging the constitutional validity of the DPDPA’s amendments to the RTI Act.

• Continue Using the RTI: File RTIs as before. When information is denied under the new provisions, appeal the decision. This creates a body of evidence showcasing the law’s chilling effect and builds a case for its reform.

• Raise Public Awareness: Use social media, community meetings, and articles to explain how the DPDPA affects everyone’s right to hold the government accountable. An informed citizenry is the first line of defense.

• Lobby Political Representatives: Pressure MPs and MLAs across party lines to commit to amending the DPDPA to safeguard the core principles of the RTI Act. The cross-party support in Beawar for the RTI museum shows that this is not a partisan issue.