Personal information and privacy form one of the most important areas of tension within the Right to Information framework.
RTI promotes:
→ Transparency → Accountability → Citizen empowerment
Privacy protects:
→ Personal autonomy → Dignity → Personal data → Informational control
Transparency + Accountability
vs
Privacy + Dignity + Personal Information Protection
The RTI Act does not create an unlimited right to access information about private individuals.
At the same time, the privacy interest must be understood alongside legitimate public-interest accountability.
The Supreme Court's nine-judge Bench in:
Justice K.S. Puttaswamy (Retd.) v. Union of India (2017)
recognised privacy as a fundamental right.
Privacy is primarily rooted in:
Article 21
and is connected with the broader guarantees of liberty, dignity and autonomy under Part III.
The Supreme Court has described privacy as a constitutionally protected right and has emphasised that it is not absolute. (api.sci.gov.in)
Article 21 ↓ Privacy ↓ Dignity + Autonomy + Informational Control
Privacy includes an important informational dimension.
Concerns a person's ability to have meaningful control over information about themselves.
The Supreme Court has recognised informational privacy as part of the broader constitutional right to privacy. (api.sci.gov.in)
Privacy in the digital age is not merely physical secrecy; it also concerns control over personal information.
This is the most important current-law point.
Section 8(1)(j) of the RTI Act was substituted through:
Section 44(3) of the Digital Personal Data Protection Act, 2023.
The amended provision came into force on:
13 November 2025.
The current wording protects:
"information which relates to personal information".
Older RTI books and coaching material often reproduce the pre-2025 Section 8(1)(j).
For current-law questions, use the amended wording.
Before the 2025 amendment, the provision dealt with personal information through a more detailed test involving:
The Supreme Court's earlier RTI jurisprudence developed substantially around this formulation.
These older judgments remain important for understanding the evolution of RTI/privacy jurisprudence, but their old statutory wording should not be presented as the current text.
8(1)(j) → Information which relates to personal information.
Earlier cases examined:
Personal Information + Public Activity/Public Interest + Privacy + Larger Public Interest.
In a current-law question:
→ State the amended provision first.
Then:
→ Mention older case law as historical/jurisprudential context where relevant.
Personal information broadly concerns information relating to an identifiable individual.
The fact that a record is held by a public authority does not automatically convert personal information into public information.
Government departments hold large quantities of personal information.
Examples:
Government custody ≠ Automatic public disclosure.
The applicable statutory privacy/exemption framework must be examined.
Public officials do not lose all privacy merely because they work for the government.
In Girish Ramchandra Deshpande v. CIC, the Supreme Court treated various service-related and financial details of a government employee as personal information under the then-existing Section 8(1)(j) framework. (api.sci.gov.in)
Public employment does not eliminate an individual's legitimate privacy interests.
A distinction may arise between:
Information directly concerning public duties and institutional functioning.
Information concerning an individual's private sphere.
Public procurement decision → Stronger transparency interest.
Employee's private medical record → Stronger privacy interest.
The public/private character of the information matters.
Historically, RTI jurisprudence developed a balance between:
Privacy and Larger Public Interest.
Earlier Supreme Court jurisprudence under the pre-2025 Section 8(1)(j) framework held that personal information could in appropriate cases be disclosed where larger public interest justified disclosure. (api.sci.gov.in)
Because Section 8(1)(j) was changed in 2025, older formulations of the public-interest test should be described as part of the historical RTI jurisprudence unless supported by the current statutory text.
The Supreme Court has clearly recognised:
Right to Privacy → Fundamental Right.
It forms part of the constitutional protection of life and personal liberty under Article 21.
The Court has also explained that privacy is not absolute and restrictions must satisfy constitutional requirements. (api.sci.gov.in)
Privacy ≠ Absolute.
RTI ≠ Absolute.
Both require lawful balancing within the constitutional framework.
Privacy protects more than secrecy.
It supports:
Dignity + Autonomy + Informational Control
A rights-based governance system should not treat citizens merely as sources of data.
The Supreme Court has linked privacy with personal liberty.
Article 21 ↓ Life + Personal Liberty ↓ Privacy ↓ Autonomy + Dignity
State transparency must operate consistently with constitutional liberty.
Informational privacy concerns the ability of individuals to exercise control over personal information.
Large government databases increase both:
Transparency Potential and Privacy Risk.
Some forms of personal information can create particularly serious privacy risks.
Examples may include:
The sensitivity and consequences of disclosure matter in privacy analysis.
Medical information is a classic privacy-sensitive category.
Public authority possession does not automatically make medical information publicly accessible.
Examples:
The Supreme Court's older RTI jurisprudence has recognised financial and tax information concerning individuals as personal information. (api.sci.gov.in)
Public-interest considerations may arise depending on the facts and applicable law.
Service records can include:
Earlier Supreme Court decisions treated many such details as personal information under the then-current RTI provision. (api.sci.gov.in)
Government employment does not make every service record automatically public.
Government institutions may hold:
Large-scale identity databases require strong safeguards against:
The RTI regime and data-protection framework must be considered together in digital governance.
Information relating to children can raise enhanced privacy concerns.
Public transparency should not casually expose vulnerable individuals.
Where information relates to a third party, Section 11 may become relevant.
RTI Request ↓ Third-Party Information Identified ↓ Statutory Consultation ↓ PIO Decision ↓ Appeal if challenged
Third-party consultation is procedural.
It does not itself create an absolute veto.
Concerns exemption relating to personal information under the current law.
Provides a procedural mechanism concerning third-party information.
8(1)(j) → Exemption.
11 → Consultation Procedure.
Section 11 itself is the personal-information exemption.
❌ Wrong.
A record may contain:
Section 10 can permit separation of the exempt portion.
Government report ├── Employee medical details → Sensitive └── Aggregate expenditure → Potentially disclosable
Privacy does not necessarily require withholding an entire document.
Modern data governance can sometimes protect privacy while preserving accountability.
Individual beneficiary identities → Protected.
Aggregate beneficiaries and total expenditure → Potentially disclosed.
Privacy-preserving disclosure can help reconcile transparency and accountability.
Maximum Lawful Transparency + Minimum Necessary Personal Disclosure
Not all information concerning a person is equally private.
Information directly concerning:
may raise stronger transparency considerations.
The public/private distinction should be analysed carefully.
Because the text of Section 8(1)(j) changed in 2025, UPSC answers should avoid presenting pre-2025 jurisprudential tests as though they remain the exact statutory wording.
Personal information can sometimes become relevant to public accountability.
Allegations involving:
Earlier case law recognised that larger public interest could justify disclosure in appropriate cases under the former Section 8(1)(j) framework. (api.sci.gov.in)
A current decision must also account for the amended Section 8(1)(j), privacy rights and the applicable data-protection framework.
A public official's office may create legitimate transparency interests.
Public office ≠ Complete loss of privacy.
Official: → Decision taken in official capacity → Greater accountability interest.
Official: → Personal medical condition → Stronger privacy interest.
Transparency should focus on the exercise of public power without unnecessarily exposing private life.
Where personal information is directly connected with public expenditure, an accountability dimension may arise.
Public money → Official entitlement → Payment record
Possible transparency interest.
Personal data unnecessary for accountability → May need protection.
Disclose what is necessary for public accountability, not every private detail.
Disciplinary records can involve:
Earlier Supreme Court RTI jurisprudence treated many such records as personal information under the former Section 8(1)(j). (api.sci.gov.in)
The old judicial formulation should be identified as historical jurisprudence rather than silently presented as the current statutory text.
Government increasingly processes:
Digital administration creates an enormous transparency opportunity but also an enormous privacy risk.
Responsible Digital State
The Digital Personal Data Protection framework introduces a separate legal architecture concerning:
The RTI privacy exemption was amended in 2025 through that legislative framework.
UPSC preparation should treat:
RTI + Constitutional Privacy + Data Protection
as interconnected but distinct legal frameworks.
An individual's consent can be relevant to privacy analysis, but public-law disclosure cannot always be reduced to a simple consent question.
Government information disclosure involves:
not merely private contractual consent.
The Supreme Court's privacy jurisprudence recognises that privacy is not absolute and that restrictions on privacy must satisfy constitutional requirements including:
Constitutionally Defensible Privacy Restriction
The same constitutional values are relevant when analysing transparency-versus-privacy conflicts.
Privacy should not be treated as a blanket shield for wrongdoing.
At the same time, public interest should not become a blanket justification for publishing private data.
Identify:
Modern governance should move beyond:
Disclose Everything vs Disclose Nothing.
Personal Identifiers → Redact.
Sensitive Data → Mask.
Aggregate Information → Disclose.
Institutional Decisions → Disclose.
Public Expenditure → Disclose where lawful.
Privacy-preserving transparency is central to modern digital governance.
A denial based on personal information can be challenged through:
PIO ↓ First Appeal ↓ Information Commission
The Commission may examine the statutory basis for withholding information.
The Commission must operate within:
Judicial review can become important where there is tension between:
Article 19(1)(a) → Right to know / expression.
Article 21 → Privacy / dignity / liberty.
19(1)(a) vs 21
The Constitution seeks harmonisation, not the automatic supremacy of one right in every factual situation.
The Supreme Court treated information concerning an employee's service record, disciplinary matters and certain financial details as personal information under the then-existing Section 8(1)(j) framework. (api.sci.gov.in)
The Court dealt with requests for personal information concerning bank employees and reinforced the privacy concerns around such information under the former Section 8(1)(j) framework.
These cases explain the evolution of RTI/privacy jurisprudence under the pre-2025 statutory wording.
Do not quote the old wording as if it were the current Section 8(1)(j).
The Supreme Court's electoral-bonds judgment demonstrates that informational privacy and the public's right to know can directly conflict.
The Court recognised political-affiliation-related financial information as falling within the constitutional privacy analysis while separately considering the transparency interests involved. (api.sci.gov.in)
Privacy questions can arise even where information has major public-interest implications.
Even where an organisation is generally exempt under Section 24, personal information may still require careful treatment under applicable legal provisions.
Security exemption ≠ Automatic waiver of privacy considerations.
A single record can involve both:
Security personnel records.
8(1)(a) + 8(1)(g) + 8(1)(j) + Section 10
RTI decisions may require application of multiple provisions simultaneously.
Commercial records can also contain individual personal data.
Tender documents + Personal contact details + Bank information
Protect personal information that is unnecessary to public accountability while disclosing lawful commercial/public information where appropriate.
Government welfare databases may include:
Aggregate disclosure + Anonymisation + Targeted accountability
Social audits require information for verification.
Provide enough information for verification while protecting unnecessary personal data.
Public Works Social Audit:
Disclose:
Protect where necessary:
Social accountability should be privacy-aware.
Section 4 proactive disclosure should also be privacy-sensitive.
Transparency by design + Privacy by design.
Digital records increase:
Information disclosed once can be:
The privacy risk of digital disclosure can be greater than the privacy risk of a one-time physical inspection.
Major challenges include:
Develop consistent rules for:
Disclose only what is necessary for the accountability objective.
Redact personal identifiers where possible.
Use aggregate and de-identified information.
Ensure administrative practice considers:
Government databases should incorporate:
Train Commissioners and PIOs in:
Where transparency and privacy conflict, provide reasoned decisions explaining:
Article 19(1)(a) → Right to know.
Article 21 → Privacy, dignity, liberty.
Section 8(1)(j) → Current personal-information exemption.
Section 10 → Severability.
Section 11 → Third-party procedure.
DPDP framework → Personal-data governance.
Puttaswamy → Privacy fundamental right.
Historical RTI cases → Developed personal-information jurisprudence under earlier Section 8(1)(j).
Modern RTI-Privacy Framework
Privacy is not a Fundamental Right because it is not expressly worded in Article 21.
❌ Wrong.
The Supreme Court has recognised privacy as a fundamental right under Article 21.
Any information held by government is public information.
❌ Wrong.
Government custody does not eliminate privacy protection.
Government employees have no right to privacy in service records.
❌ Wrong.
Earlier Supreme Court RTI jurisprudence recognised significant privacy protection for personal service information.
Section 8(1)(j) still contains exactly the pre-2025 wording.
❌ Wrong under current law.
It was substituted with the current personal-information wording effective 13 November 2025.
Section 11 is the privacy exemption.
❌ Wrong.
Section 11 is primarily a third-party consultation procedure.
Third-party objection automatically prevents disclosure.
❌ Wrong.
It does not constitute an absolute veto.
Every personal-information record is permanently immune from disclosure regardless of legal framework.
❌ Do not frame it so absolutely.
Current Section 8(1)(j), other RTI provisions, constitutional principles, and applicable data-protection law must be considered.
Privacy always defeats transparency.
❌ Wrong.
The legal framework requires balancing of competing interests.
Transparency always defeats privacy where public money is involved.
❌ Wrong.
Only information necessary and lawfully disclosable should be considered.
Puttaswamy made privacy an absolute right.
❌ Wrong.
The Supreme Court expressly recognised that privacy is not absolute. (api.sci.gov.in)
Digital information creates no greater privacy risk than paper records.
❌ Wrong.
Digital data can be copied, linked, aggregated and profiled at much larger scale.
Anonymisation is irrelevant to RTI.
❌ Wrong.
Privacy-preserving disclosure can help reconcile accountability with data protection.
The Right to Information and the right to privacy are both essential components of democratic governance. RTI promotes transparency and accountability, while privacy under Article 21 protects dignity, autonomy and informational control. The 2025 amendment to Section 8(1)(j) has further changed the statutory landscape by replacing the earlier privacy-exemption wording with protection for information that relates to personal information.
Transparency vs Privacy.
For UPSC answers in the current legal environment, do not reproduce the pre-2025 Section 8(1)(j) wording as though it remains the statutory text. The historical cases remain useful to explain the evolution of RTI/privacy jurisprudence, but the current provision must be stated first.
The objective should not be to choose between transparency and privacy in absolute terms. A mature democracy requires maximum lawful transparency with minimum unnecessary intrusion into personal life, supported by constitutional privacy safeguards, careful statutory interpretation and privacy-preserving technology.
