India's Digital Personal Data Protection Act is facing its first serious constitutional challenge. Twenty-one news publishers — spanning India's most powerful media conglomerates — filed before the Supreme Court this week arguing the law's consent requirements amount to pre-censorship of journalism. The court agreed to hear the case next month. The mechanism is straightforward and devastating. Under the law, journalists would need to seek consent from investigation subjects before publishing. As the Digital News Publishers Association's lawyer told the court: "Newsrooms will shut down, if we have to ask for permission." An investigative reporter looking into corporate fraud would be legally required to notify the target, who could then destroy evidence and intimidate witnesses. The law further allows subjects to withdraw consent at any time and demand data erasure — with no public-interest override — meaning published, factual reports could be forcibly unpublished or redacted. The coalition challenging the law is itself remarkable. The DNPA's members include Mukesh Ambani's Network18 (seven digital news platforms), Gautam Adani's NDTV, the Indian Express, and Times Internet — companies that are otherwise fierce competitors and, in some cases, closely aligned with the Modi government. That even regime-friendly outlets see this law as an existential threat tells you something about the breadth of its reach. The deeper infrastructure threat sits in two provisions. First, a new federal authority can impose fines for noncompliance, creating a financial sword over every newsroom. Second, beginning next year, New Delhi gains the power to order any data-handling organisation to "furnish such information as it may call for" — a provision the DNPA calls "nakedly unguided" and one that could compel reporters to hand over source identities. The chilling effect on whistleblowers is not a side effect; it is a structural feature. Media companies note they received verbal assurances from the government in an August meeting that press freedom would be protected. But unlike the EU's GDPR, Singapore's PDPA, and Britain's Data Protection Act — all of which contain explicit journalistic exemptions — India's law has none in writing. The gap between a verbal promise and a statutory exemption is the gap between discretionary power and rule of law. The DNPA's filing specifically targets the government's power to block access to information in the "interests of the general public," arguing this vague standard hands New Delhi a content-removal tool with no judicial guardrails. Combined with the source-disclosure mechanism, the law creates a layered system where the state can identify who leaked, punish who published, and erase what was written. The Supreme Court's willingness to hear the case is the first procedural checkpoint. But the structural question is whether India's judiciary will treat press freedom as a constitutional constraint on data law, or whether the consent framework will be allowed to swallow investigative journalism whole. Every democracy with a modern data-protection regime has faced this tension. India is the only major one attempting to resolve it without a written press exemption.
