Twenty-one news publishers have challenged parts of India's Digital Personal Data Protection (DPDP) Act in the Supreme Court. The court has asked the government to respond by 17 November 2026, and IT Minister Ashwini Vaishnaw said on 28 October that the government would consider the publishers' concerns.
What the publishers are arguing
The publishers say the Act's consent requirements could hinder investigative journalism: reporting on people often involves processing their personal data without consent. They also argue it could expose confidential sources.
What DPDP means for ordinary users
The court case is about specific provisions. The core idea of the law — that companies need a valid reason, usually your consent, to process your personal data — affects everyone who uses apps and websites. Under the Act, you as a "data principal" have rights including:
- Clear consent requests that explain what data is collected and why.
- Withdrawing consent as easily as you gave it.
- Accessing a summary of the personal data a company holds about you.
- Correcting or erasing your data when it's no longer needed.
- Grievance redressal from the company, and escalation to the Data Protection Board of India.
- Nominating someone to exercise your rights if you die or are incapacitated.
Companies' obligations are being phased in under the DPDP Rules, so you'll increasingly see clearer consent screens and privacy options in Indian apps.
Practical steps you can take now
- Read consent pop-ups instead of tapping "Accept all", especially on loan, shopping and health apps.
- Use app settings to delete accounts you no longer use.
- Be wary of apps asking for contacts, SMS and location without a clear reason.
What happens next
Once the government files its response, the court will decide whether to hear the matter in detail. Any changes would most likely affect how the law applies to journalism, not the basic rights listed above.
Sources: The420.in
