Can Newspapers Use Your Data Without Consent? What the DPDP Act Really Means for You

Imagine opening a news app and seeing a story about a protest in your city. The article includes photos clearly showing faces of participants, their social media posts, and details about their employment. Did these people consent to having their information published? Under India's Digital Personal Data Protection Act 2023, this question has become legally complicated.

Several major news organisations have now challenged this law in the Supreme Court, arguing it could restrict journalism. But what does this law actually mean for ordinary Indians like you?

What is the DPDP Act and why should you care?

The Digital Personal Data Protection Act came into force to give Indians control over their personal information. Personal data means anything that can identify you: your name, phone number, email, photos, location data, even your shopping habits or health records.

The core principle is simple: companies and organisations cannot collect or use your data without your consent. They must tell you clearly what data they are taking and why. You have the right to see what data they hold about you, correct mistakes, and demand deletion when the purpose is fulfilled.

This applies to everyone from tech giants to your local shop that collects customer phone numbers. Violating these rules can result in penalties up to Rs 250 crore.

The journalism exception that triggered the debate

The DPDP Act does include an exception for journalistic purposes. News organisations can process personal data for reporting without explicit consent, but the law says this freedom comes with conditions set by the government.

This is where the friction begins. Publishers argue that allowing the government to define these conditions could enable censorship. They worry about situations like this: a journalist investigates corruption using leaked documents containing personal data of officials. Under strict rules, could the government claim this violated data protection and punish the publication?

The government's position is different. It says reasonable restrictions are necessary to prevent misuse, protect privacy, and ensure media remains accountable.

What this means for your everyday privacy

While courts settle the press freedom debate, the DPDP Act already affects how organisations handle your data today:

When you sign up for a service, companies must now ask for specific consent. Those pre-checked boxes saying "I agree to terms and conditions" are no longer enough. You should see clear explanations of what data is collected and why.

You can withdraw consent anytime. If you signed up for marketing emails three years ago, you can now demand the company delete your information from their database.

Data breaches must be reported. If a company loses your data to hackers, they are legally required to inform you so you can protect yourself.

Your children are protected. Companies cannot collect data from anyone under 18 without parental consent. This covers everything from gaming apps to educational platforms.

What you should actually do

Start reviewing app permissions on your phone today. Does your flashlight app really need access to your contacts and location? Revoke permissions that seem excessive.

When websites ask for consent to use cookies or collect data, read what they are actually asking for. You can often reject non-essential data collection while still using the service.

If a company refuses to delete your data or ignores your privacy requests, you can file a complaint with the Data Protection Board once it becomes fully operational. Keep records of your requests and their responses.

Be aware that while the law protects your privacy, legitimate journalism serves public interest. The balance between these rights is still being defined by courts.

The legal framework protecting your personal information is evolving rapidly. Each case and judgment shapes how privacy and other freedoms coexist in digital India. For specific concerns about data misuse or privacy violations affecting you, consult a verified advocate on Lex Now who can guide you based on your situation.

This article is general legal awareness, not legal advice. Laws change and every case is different — consult a verified advocate on Lex Now for guidance on your situation.