Rethinking Government Data Power Under the DPDP Act: A Critical Analysis

KanoonHQ Legal Gazette · AI-generated brief from the source linked below. How briefs are made

Published 22 October 2026

Statutes: Digital Personal Data Protection Act, 2023
Source: SCC Times

Bottom Line Up Front (BLUF)

This SCC Times article critically examines the scope of government data collection and processing under the Digital Personal Data Protection Act, 2023. It highlights concerns regarding broad exemptions for state entities and the potential for surveillance, urging a re-evaluation of the balance between state power and individual privacy rights to ensure robust data protection.

Ratio Decidendi · Legal Principle Established

The article's core argument is that the Digital Personal Data Protection Act, 2023, while aiming to protect personal data, grants overly broad exemptions to the State, potentially undermining the fundamental right to privacy and enabling extensive government data collection without sufficient safeguards or accountability.

Practice & Procedural Impact for Advocates

Advocates should scrutinize government data requests, challenging those that appear to exceed legitimate purposes or lack proportionality. Litigants should be aware of their limited recourse against state data processing under the current DPDP Act framework. Policy advocates should continue to push for amendments to narrow state exemptions and strengthen accountability mechanisms.

Key Legal Takeaways

1The DPDP Act, 2023, provides significant exemptions for government entities, raising concerns about surveillance.
2The article argues for a re-evaluation of the balance between state data power and individual privacy rights.
3It highlights the need for stricter safeguards and accountability for government data processing under the Act.

The Legal Issue The SCC Times article, "What Should the State Know? Rethinking Government Data Power under the DPDP Act," by Samanvi Narang and Maitry Pandit, delves into a critical examination of the Digital Personal Data Protection Act, 2023 (DPDP Act). The central legal issue explored is the extent to which the DPDP Act effectively balances the State's need for data processing with the fundamental right to privacy of individuals. The authors specifically highlight concerns regarding the broad exemptions granted to government entities under the Act, which they argue could potentially facilitate extensive state surveillance and data collection without adequate checks and balances, thereby undermining the very purpose of data protection.

Court's Reasoning As this is an analytical article and not a judicial decision, there is no 'court's reasoning' in the traditional sense. Instead, the authors' reasoning is presented. They argue that while the DPDP Act aims to establish a framework for personal data protection, its provisions concerning government data processing are problematic. The authors contend that the wide-ranging exemptions for state entities, particularly in matters of national security, public order, and prevention of crime, are not sufficiently circumscribed. This lack of clear boundaries and robust oversight mechanisms, they reason, creates a fertile ground for potential misuse of data and infringement on individual privacy, moving away from the principles established in landmark privacy judgments.

Why It Matters This analysis is significant for several reasons. Firstly, it brings to the forefront a crucial debate about the scope of state power in the digital age and its implications for fundamental rights. Secondly, it serves as a critical commentary on the efficacy of the DPDP Act in its current form, urging policymakers and legal practitioners to reconsider the balance between state interests and individual privacy. For advocates, it underscores the need to critically examine government data requests and processing activities, potentially laying the groundwork for future legal challenges. For citizens, it highlights the importance of understanding their data rights and the limitations within the current legal framework when dealing with government entities. The article implicitly calls for a more robust and rights-protective interpretation or amendment of the DPDP Act to ensure that government data power is exercised responsibly and accountably.