Supreme Court Issues Notice on 21 Publishers' Challenge to India's DPDP Law Explained: Press Freedom, Consent Rules, and the 17 November Hearing
Key Takeaways
- On 27 October 2026 the Supreme Court issued notice to the Centre on the Digital News Publishers Association's petition and listed it for 17 November 2026, along with pending petitions.
- The bench of Chief Justice Surya Kant and Justices Joymalya Bagchi and V Mohana did not stay the law, saying it could not pass ex parte stay orders without hearing the government.
- The petition, filed 6 October 2026 by 21 publishers, challenges nine DPDP Act provisions and three DPDP Rules, arguing the law has no journalistic exemption.
- The publishers say consent, erasure and state-access rules could warn investigation subjects, force changes to published reports, or expose sources; Section 44(3) also rewrites the RTI Act's personal-information exemption.
- The law's contested provisions are due to take effect from May 2027, and the government previously assured the industry on press freedom in August without, the publishers say, putting it in writing.
What happened in court on 27 October
The Supreme Court of India on Tuesday, 27 October 2026, issued notice to the Centre on a petition by 21 news publishers challenging provisions of the Digital Personal Data Protection (DPDP) Act and the DPDP Rules, on the ground that they infringe press freedom and the right to information. A bench comprising Chief Justice of India Surya Kant and Justices Joymalya Bagchi and V Mohana heard senior advocate Madhavi Goradia Divan, appearing for the Digital News Publishers Association (DNPA), and listed the matter for further hearing on 17 November 2026, along with pending petitions.
Reporting of the hearing is consistent across sources. Reuters reported on 27 October that media groups told the court the privacy law would require journalists to seek consent from people they write about, amounting to pre-censorship that could lead to newsrooms shutting down. The Indian White Paper's account of the hearing records the same bench, the same notice, and the same 17 November date. NewsPlainly, summarising LiveLaw and The Hindu's court reporting, adds that notice was issued both on the main petition and on the application seeking an interim stay.
It is important to be precise about what this step means. Issuing notice is not a decision on the merits. It means the court has asked the government to respond. The publishers' arguments described below are their claims, not findings of the court, and the government's detailed reply had not been reported in court at the time of the hearing. The next hearing, on 17 November, is when the Centre's response will begin to shape the case.
What the court did not do
The bench did not stay the law. According to The Hindu, as summarised by NewsPlainly, Chief Justice Kant said, "We cannot pass ex parte orders of stay," meaning the court would not pause the law without first hearing the government. The publishers' lawyers said they were not pressing for an immediate stay but wanted the Centre to answer their plea for one.
That distinction matters for readers. Nothing in the 27 October order suspends the DPDP Act or its rules. Newsrooms, platforms and ordinary readers face the same legal position the day after the hearing as they did the day before it, except that the government is now formally required to answer the challenge. A final verdict in a constitutional challenge of this kind usually takes months, with written submissions, hearings and possibly intervention applications from other interested parties.
The Chief Justice also invited a practical contribution from the petitioners. LiveLaw reported that he told the publishers they were the domain experts and invited them to suggest safeguards against misuse, and that a balance had to be struck between citizens' rights and those of the media. The Hindu reported that he welcomed suggestions on how to weigh the rights of innocent citizens against misuse of press freedom, while protecting the media's right to inform the public. In other words, the court signalled that it is interested not only in whether the law is valid, but in what a workable balance between privacy and press freedom would look like.
Who filed the case, and when
The petition was filed by the Digital News Publishers Association, which groups the digital arms of 21 news organisations. Reporting names Network18, NDTV, The Indian Express and Times Internet among them, and LiveLaw's list, as summarised by NewsPlainly, also includes The Hindu, India Today, the Times Group and Zee. Reuters reported on 26 October that the group includes companies owned by billionaires Mukesh Ambani and Gautam Adani, and noted that both the businesses and the government have denied opposition charges that those businesses receive favourable treatment from Prime Minister Narendra Modi's government.
The petition itself was filed on 6 October 2026 and runs to 698 pages, according to a report by Best Media Info based on the Reuters story. Yukta Mudgal, an independent investigative journalist in New Delhi, is a second petitioner, according to LiveLaw. Until this case, Reuters reports, the DPDP law had been challenged only by free-speech activists and a group of smaller news outlets. This is the most high-profile challenge yet, and Divan described it in court as perhaps the first comprehensive petition by what she termed the "legacy media", distinguishing traditional news organisations from citizen journalists.
That profile is part of why the case attracted attention before the hearing. A challenge from free-speech activists is expected; a challenge from large commercial publishers, including companies associated with two of India's most prominent business figures, is not. It complicates the usual political framing of press-freedom disputes, because the petitioners cannot easily be dismissed as marginal or partisan voices. At the same time, it does not prove their legal argument. The court will decide the case on the law, not on who filed it.
What the DPDP law does
The DPDP law is India's privacy law for digital personal data. Its stated purpose is to protect the personal data of individuals, and it raises compliance requirements for platforms and organisations that handle such data, including large technology companies such as Meta and Google.
In practice, data-protection laws of this kind usually work through a few core ideas: an organisation should have a lawful basis, often consent, before processing someone's personal data; individuals should be able to withdraw that consent; and individuals should be able to ask for their data to be corrected or erased in certain circumstances. The government announced implementation of the law last year, Reuters reports, and the publishers say that the law's most contentious provisions are due to come into force from May 2027.
That timeline is part of why the case is being filed now. The publishers are not challenging a law that has already been used against a newsroom in a decided case. They are asking the court to intervene before the contested provisions take full effect, on the ground that the law's design itself creates a risk for journalism.
Exactly what the publishers are challenging
The petition, filed under Article 32 of the Constitution, asks the court to declare nine provisions of the DPDP Act, 2023, unconstitutional: Sections 7, 17(2), 18, 19, 27, 29, 36, 37 and 44(3). It also challenges Rules 16, 17 and 23 of the DPDP Rules, 2025, LiveLaw reported.
The core complaint is simple: the law contains no specific exemption for journalism. Earlier drafts of a data-protection law did carry one — the Personal Data Protection Bill of 2018 exempted journalistic purposes, and the 2019 and 2021 bills kept journalism provisions — but the draft Digital Personal Data Protection Bill of 2022 dropped the specific exemption, and the DPDP Act enacted on 11 August 2023 contains none. Section 17(2) exempts notified state agencies and research, archiving or statistical work where no decision is taken about a person, but says nothing for news reporting. The petition calls that distinction arbitrary.
Three concerns flow from that gap, and Divan pressed each of them in court.
First, consent. If a journalist must obtain consent from a person before processing that person's personal data as part of an investigation, the publishers argue, the subject of the investigation would be warned in advance. That warning, they say, could allow evidence to be destroyed or witnesses to be intimidated before a story is published. Divan put it bluntly in court: "If I am left to the mercy of the data principal as to whether he or she will give consent, how will news be reported?" She added that the requirements could effectively shut down newsrooms, and stressed the particular problem for television journalism, where reporting is live and time-sensitive: "On television, it is live. Otherwise, it has to be new."
Second, erasure and withdrawal of consent. The DNPA has argued, according to Reuters, that the right to withdraw consent and seek erasure could be used to demand the removal or substantial alteration of factual news reports even after publication, because the law contains no specific public-interest exemption for journalism. In other words, a person unhappy with an accurate but unflattering published story might use privacy rights to try to get it taken down or rewritten.
Third, sources and state access. The publishers say that powers under the law to demand information could expose journalists' sources. Section 36 allows the Centre to require the Data Protection Board, any data fiduciary or intermediary to furnish information it calls for; the petition argues there is no judicial oversight or notice requirement, so the power could be used to trace confidential sources. Section 37 allows the Centre, after the Board has fined a company in two or more cases and advised it, to order public access to its information to be blocked in the interests of the general public; the petition argues that power is too broad and could hit news. Protecting sources is a core principle of press freedom: if people who leak documents or speak confidentially believe they can be identified through legal demands for data, they are less likely to come forward.
The petition also questions the Data Protection Board itself. Sections 18, 19 and 27 set up the Board, its members and its powers to inquire and penalise, and the petitioners argue that a body whose chairperson and members are chosen by the executive, with no judicial member required, needs a judicial member given the scale of its fining powers. The Schedule to the Act sets maximum penalties per breach of up to Rs 250 crore for failing to take reasonable security safeguards against a data breach, up to Rs 200 crore each for failing to report a breach and for breaching the extra duties on children's data, up to Rs 150 crore for breaching the extra duties of a Significant Data Fiduciary, and up to Rs 50 crore for breach of any other provision.
Why the RTI change matters beyond newsrooms
One part of the challenge reaches ordinary citizens directly, even if they never file a story. Section 44(3) of the DPDP Act rewrites Section 8(1)(j) of the Right to Information (RTI) Act, the 2005 law that lets citizens ask public offices for records. The new clause exempts "information which relates to personal information".
The earlier clause allowed personal information to be withheld only when it had no link to any public activity or interest, and let it be released when a larger public interest justified it. The publishers argue the rewrite removes that balance, even for records about public officials acting in their official role. Divan told the court that the change was "changing the whole concept of news", and the petition cites the Supreme Court's electoral bonds judgment on the citizen's right to know.
This is not the only case on the RTI change. LiveLaw reported that in February the Supreme Court referred petitions against the amendment to a three-judge bench, and Divan told the court that other challenges are pending. The publishers' case will now be heard on 17 November along with pending petitions, which means the RTI question may be decided as part of a wider set of cases rather than in isolation.
The government's position so far
The government has not yet filed its response in this case in public reporting, and the information technology ministry did not respond to Reuters' request for comment before the hearing. But the reporting does describe earlier engagement between the two sides.
Media companies received assurances in an August meeting with the government that the law would protect press freedom, Reuters reports, citing the DNPA's filing. The publishers' problem, as described in that filing, is that an assurance in a meeting is not the same as a written exemption in the law. Without a written carve-out for journalists, they argue, newsrooms cannot rely on press freedom being protected when the law is actually enforced.
The DNPA points to other jurisdictions for comparison: the European Union, Singapore and Britain all have written protections or exemptions for journalism in their data-protection frameworks, the filing says. India's law, by contrast, does not. That comparison is likely to feature in the hearing, because courts often look at how other democracies have balanced privacy against press freedom when deciding whether a restriction is reasonable.
According to the petition, as reported by LiveLaw, the association sent a detailed representation to the Ministries of Information and Broadcasting and of Electronics and Information Technology on 10 August 2026, and its representatives met ministry officials on 25 August 2026. The reports read did not carry a response from the Centre in court; its reply is now due before the 17 November hearing.
It is worth noting what the government would be expected to argue in response, even though its detailed reply has not been reported yet. Governments defending data-protection laws typically argue that privacy is itself a fundamental right, that consent and erasure rules protect ordinary people from misuse of their data, and that journalism is not above the law. The court will have to weigh that argument against the publishers' claim that, without a journalistic exemption, the law restricts free speech and press freedom in a disproportionate way. That balancing exercise, rather than either side's press statement, is what the case is about.
What could happen next
The most immediate step is the Centre's reply, due before the 17 November hearing. At that hearing the court could set a timetable for detailed arguments, consider the interim-stay application on its merits after hearing the government, or club the case with the pending RTI petitions for a fuller hearing. Readers should not expect a final verdict at the next hearing either. Constitutional challenges of this kind usually take months.
If the case proceeds to a full hearing, the possible outcomes range widely. The court could uphold the law in full, holding that its provisions are reasonable and do not unduly restrict press freedom. It could strike down specific provisions, as the publishers have asked. Or it could take a middle path, reading the law in a way that protects journalism — for example, by interpreting its provisions to include a public-interest or journalistic exception even where the text does not spell one out. Courts sometimes prefer this "reading down" approach because it preserves the law while removing the constitutional problem. The Chief Justice's invitation to the publishers to suggest safeguards points in that direction: the court may be looking for a practical set of guardrails rather than a simple yes-or-no answer.
There is also a political route that runs alongside the legal one. The government could amend the law or frame rules that include a written journalistic exemption, which would address the publishers' central complaint without a court order. The August engagement suggests that channel of communication is open, even if it has not yet produced a written commitment. Conversely, if the court signals sympathy for the publishers, that could itself push the government towards a negotiated amendment.
For ordinary readers, the stakes are less abstract than they may seem. The outcome will help decide two practical questions: how easily can a newsroom investigate a powerful person without warning them first, and how easily can a published, factual story be challenged or removed afterwards on privacy grounds? The first question affects what stories get reported at all. The second affects whether stories that have already been published stay available to the public. A third question, through the RTI change, affects what citizens themselves can find out about public officials.
Why readers should follow this case
Data-protection law and press freedom are often discussed as if they were opposing values, one favouring privacy and the other favouring openness. In practice, most democracies try to hold both at once: individuals should control their personal data, and journalists should be able to report in the public interest. The difficulty is drawing the line, and this case is about where India's line should be drawn.
That is why the absence of a written journalistic exemption matters so much to the petitioners. Verbal assurances depend on who is in office and how a provision is interpreted on a given day. A written exemption, by contrast, gives newsrooms something they can rely on in advance, when deciding whether to pursue a story, and something they can point to if their reporting is later challenged.
None of this means the publishers will win. The Supreme Court may well hold that privacy protections are justified and that journalism must work within them, or that existing constitutional protections for free speech are sufficient without a special exemption. What is certain is that the 27 October hearing is the start of a significant test of how India balances two rights that both matter: the right to privacy and the freedom of the press.
Conclusion
The Supreme Court has asked the Centre to answer 21 publishers' challenge to the DPDP law, without staying the law, and will hear the case again on 17 November 2026. The publishers argue that without a journalistic exemption, consent, erasure and state-access rules threaten investigative reporting, source protection, the permanence of published news, and even citizens' RTI rights. The government has previously assured the industry that press freedom will be protected, but has not, according to the publishers, put that assurance in writing. With the law's contested provisions due to take effect from May 2027, the 17 November hearing is the next step in a case that could reshape the rules for both privacy and journalism in India. The court, not the headlines, will decide where the balance lies.