How the Kerala High Court Balances Legislative Information Requests with the Strengthened Privacy Regime under the DPDP Act

The Kerala High Court delivered a judgment concerning the scope of the Right to Information when applied to legislative bodies, emphasizing that the mere fact that a legislature may seek information does not confer an unrestricted right to obtain it, and simultaneously recognized that the Data Protection and Data Privacy (DPDP) Act fortifies a privacy framework which impacts such information disclosures. The court's reasoning underscored the need to balance the public's interest in transparency against the statutory privacy protections introduced by the DPDP Act, and highlighted that the right to information must be exercised within the confines of privacy safeguards, particularly where personal or sensitive data are involved, thereby rejecting any notion of an absolute entitlement to access legislative information without regard to privacy considerations. Moreover, the judgment clarified that while the legislature possesses a legitimate interest in accessing information for its functions, this interest does not translate into an unrestricted entitlement under the Right to Information law, and that the DPDP Act introduces substantive privacy rights that constrain such access, ensuring that the dissemination of information adheres to the privacy principles embodied in the new statutory regime, which the court affirmed as a strengthening of the overall privacy framework. The decision further signaled that future requests for information by legislative bodies will be subject to a judicially crafted test that weighs the purpose of disclosure against the privacy rights protected by the DPDP Act, thereby establishing a precedent that the right to information is not absolute and must be reconciled with the enhanced privacy protections now in force, a stance that the court articulated as essential for preserving individual privacy while maintaining governmental transparency. Finally, the High Court's pronouncement that there is no unrestricted right to information simply because the legislature may seek it, together with its acknowledgment of the DPDP Act's role in strengthening privacy, marks a pivotal development in Indian jurisprudence, indicating a judicial willingness to interpret information rights in light of emerging privacy legislation, and setting the stage for subsequent litigation and administrative practice to navigate the interplay between transparency obligations and privacy safeguards.

One question that naturally arises is whether the Right to Information framework, traditionally interpreted to promote openness, must now be read in a manner that accommodates the privacy safeguards articulated by the DPDP Act, and the answer may depend on the extent to which the court views the privacy provisions as a mandatory limitation on all disclosures, including those sought by a legislative entity, rather than as an advisory consideration.

Perhaps the more important legal issue concerns the standard that the court will apply to assess whether a legislative request for information sufficiently respects the privacy framework, and the answer may hinge on whether the court adopts a proportionality‑based approach that requires a balancing of the legislative purpose against the potential intrusion into privacy interests protected by the DPDP Act.

Another possible view is that the judgment introduces a procedural test for legislative RTI applications, and the legal position would turn on whether the court requires prior privacy impact assessments, consent mechanisms, or data‑minimisation steps before granting access, thereby embedding the DPDP Act’s privacy principles into the procedural machinery of information disclosure.

A competing perspective may argue that the legislature’s constitutional function to legislate and oversee government mandates a broader entitlement to information, and the legal analysis would need to clarify whether the court’s statement about “no unrestricted right” creates a categorical bar or merely a contextual limitation that can be overridden in exceptional circumstances where legislative necessity is convincingly demonstrated.

Perhaps the procedural consequence lies in the need for public authorities to develop internal guidelines that harmonise RTI response protocols with the privacy safeguards introduced by the DPDP Act, and a fuller legal conclusion would require clarity on how the court expects authorities to document the balancing exercise, what evidentiary standards will be applied, and whether judicial review will be available to challenge discretionary refusals grounded in privacy concerns.

Finally, the legal landscape may evolve as future litigants test the boundaries of the High Court’s pronouncement, and the issue may require clarification on whether the privacy framework established by the DPDP Act creates an exclusive right that pre‑empts the Right to Information in all contexts, or whether a nuanced co‑existence is possible, a determination that will shape the trajectory of both transparency and privacy jurisprudence in India.