What did Section 44(3) of the DPDP Act change in the RTI Act?

Section 44(3) amends Section 8(1)(j) of the RTI Act, 2005, removing the public interest balancing test so that any information classified as 'personal' can be exempted from disclosure regardless of public interest.

Why does the weakening of Section 8(1)(j) matter for surveillance oversight?

RTI requests about how government agencies collect, store, or share citizen data often involve records touching on named individuals or personal identifiers, so if these can be withheld simply as 'personal' without a public interest test, a major channel for scrutinizing state surveillance narrows considerably.

Who has historically relied on RTI filings for accountability, and how are they affected?

Citizens, journalists, and activists have used RTI to obtain records on procurement decisions, welfare fund misuse, and public agency workings; investigative journalists and transparency advocates now face a reduced ability to piece together how personal data flows through government systems.

How Section 44(3) of India's DPDP Act Guts RTI Access

Q: What was the standard under Section 8(1)(j) before the amendment?

Previously, government bodies could withhold personal information only if disclosure had no relationship to public activity or public interest, and only after weighing that interest against the potential invasion of privacy.

What Section 44(3) Actually Changes in the RTI Act

When India's Digital Personal Data Protection Act (DPDP Act) passed in 2023, most public attention focused on its rules for breach notifications, penalties, and consent requirements for companies handling user data. Buried in the bill, however, is Section 44(3), a clause that quietly amends Section 8(1)(j) of the Right to Information (RTI) Act, 2005.

Before this amendment, Section 8(1)(j) allowed government bodies to withhold personal information only if disclosure had no relationship to public activity or public interest, and only after weighing that interest against the potential invasion of privacy. Officials still had to justify a refusal. Under the revised language, that balancing test disappears. Any information that can be classified as "personal" can now be exempted from disclosure, full stop, regardless of whether releasing it would serve a broader public interest.

That is a significant shift in how requests are evaluated. Where an RTI officer once had to ask whether the public's right to know outweighed an individual's privacy, the new standard simply asks whether the information is personal. Given how broadly "personal information" can be interpreted, from salary details to asset disclosures to records of government contact, this reclassification hands officials a much easier way to decline requests.

Why This Matters for Surveillance Transparency and Accountability

The RTI Act has functioned for nearly two decades as one of India's most effective tools for citizens, journalists, and activists to pry loose information about government conduct. Records obtained through RTI requests have surfaced details about procurement decisions, welfare fund misuse, and the internal workings of public agencies that would otherwise remain opaque.

A weakened Section 8(1)(j) has direct implications for surveillance oversight specifically. Requests seeking details about how government agencies collect, store, or share citizen data, including questions about facial recognition rollouts, telecom interception orders, or data-sharing agreements between departments, often involve records that touch on named individuals or personal identifiers. If those records can now be withheld simply because they qualify as "personal," without any public interest test, a major channel for scrutinizing state surveillance practices narrows considerably.

This isn't a hypothetical concern. Investigative journalists and transparency advocates have historically relied on RTI filings to piece together how personal data flows through government systems, precisely the kind of information needed to hold institutions accountable when that data is mishandled or exposed. Independent reporting on data exposures, like the Bank of Baroda breach involving an exposed cloud vendor database, demonstrates why continued scrutiny of both government and corporate data handling remains essential even as this tool weakens.

How This Compares to Global Patterns of Privacy Law Limiting Disclosure

India is not alone in facing tension between privacy protections and freedom-of-information regimes. Data protection frameworks around the world often include exemptions for personal data, and governments have occasionally used those exemptions to slow-walk or deny public records requests that would otherwise be routine. The underlying friction is a familiar one: privacy law is designed to protect individuals from misuse of their data, but when public officials and public institutions can hide behind the same protections, the law can end up shielding institutional conduct rather than individual citizens.

What sets India's case apart is the removal of the public interest balancing test altogether. Many comparable frameworks still require some weighing of competing interests before information can be withheld. Section 44(3) instead sets a lower bar, personal information can be exempted outright. Critics argue this makes India's version more restrictive than typical global norms, since it eliminates the case-by-case judgment that previously allowed disclosure when public interest was clearly at stake.

What Indian Citizens and Privacy Advocates Can Do Now

For everyday RTI users, the practical impact is real but not insurmountable. Requesters should be explicit in framing why the requested information serves a public interest, even though officials are no longer legally required to weigh that interest under the amended provision. Building a documented public interest argument still strengthens appeals if a request is denied.

Civil society groups and journalists tracking government data practices should also diversify their sources of accountability. Court filings, parliamentary disclosures, procurement portals, and independent security research all remain avenues for surfacing information that RTI requests may no longer reach as easily.

What This Means for You

If you live in India and have used RTI to seek information about government programs, data handling, or surveillance practices, expect more denials citing personal information exemptions, and be prepared to appeal with a clearly articulated public interest justification. If you work in journalism, research, or advocacy, this is a moment to document denial patterns systematically, since consistent record-keeping will matter if these provisions face legal challenge.

Key Takeaways

Section 44(3) of the DPDP Act removes the public interest balancing test from RTI requests involving personal information.
This change makes it easier for officials to deny requests tied to government data practices and surveillance oversight.
India's approach is stricter than many global privacy frameworks that still require some public interest weighing.
Citizens and advocates should document denials, build strong public interest arguments in appeals, and pursue parallel accountability channels such as independent security reporting and court records.

The broader lesson from India's data protection law RTI overlap is that privacy protections and transparency laws need not be at odds, but poorly balanced amendments can quietly erode one while strengthening the other. Staying informed about how these provisions are applied in practice will be essential for anyone who relies on public records to hold institutions accountable.