📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—dpdp-rti:recent-cic-orders-post-dpdp [2026/07/11 01:28] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(CIC orders DPDP RTI, CIC section 8 1 j post DPDP, CIC personal information exemption 2024, CIC RTI decisions 2024, CIC orders personal data 2024 2025)
 +metatag-title=(CIC Orders Post-DPDP Section 8 1 j RTI 2026 India)&metatag-description=(6 key CIC orders post-DPDP Act 2023 that interpret the amended Section 8 1 j RTI exemption — case numbers, parties, ratios and what they mean for your RTI.)}}
  
 +====== CIC Orders Post-DPDP: Section 8(1)(j) Rulings 2023-25 — citizen guide 2026 ======
 +
 +{{page>snippets:dpdp-banner}}
 +
 +<WRAP center round tip 95%>
 +**In 50 words:** After the DPDP Act 2023 amended Section 8(1)(j), the Central Information Commission began applying the narrower personal-information standard. This page analyses 6 landmark and instructive CIC orders issued after August 2023, explaining their ratios and what each one means for RTI applicants and public information officers.
 +</WRAP>
 +
 +The Central Information Commission (CIC) processes thousands of second appeals and complaints every year. After the Digital Personal Data Protection Act 2023 amended Section 8(1)(j) of the RTI Act with effect from 11 August 2023, CIC benches had to recalibrate how the personal-information exemption operates. Some benches quickly adopted the amended text; others continued citing the pre-DPDP formulation while applying effectively the same analysis.
 +
 +This page documents the key post-DPDP CIC decisions on Section 8(1)(j) and kindred personal-data grounds, with their one-line ratios, case references (where publicly verifiable from cic.gov.in), and practical implications.
 +
 +<WRAP round info 95%>
 +**Verification note:** CIC orders are published on [[https://cic.gov.in|cic.gov.in]] under "Orders of the Commission". All case references below are drawn from publicly available CIC order archives and secondary reporting on RTI activist platforms. Researchers should independently verify via the CIC search portal before relying on case numbers in legal proceedings.
 +</WRAP>
 +
 +===== Why these cases matter =====
 +
 +A CIC bench order is not binding precedent in the way a Supreme Court ruling is. However:
 +  * CIC orders constitute **persuasive authority** before the FAA and other CIC benches.
 +  * A Second Appeal or complaint citing a supportive CIC order substantially improves your chances.
 +  * DOPT and ministries track CIC orders to update their internal PIO guidance.
 +
 +===== Case 1: Government employee salary and service records =====
 +
 +**Type of case:** RTI seeking copy of salary slips, pay increments and Annual Property Return (APR) of a named government officer.
 +
 +**PIO's position:** Refused under S.8(1)(j) — personal and private information.
 +
 +**CIC Ratio:** The Commission reiterated the settled principle from //Girish Deshpande (2013)// that salary slips of a public servant can be withheld if the applicant fails to establish public interest. However, where the officer holds a public-facing spending or disbursement role, the APR and the pay-scale range (without exact breakup) must be disclosed. The bench noted that the DPDP amendment does not override the //Girish Deshpande// framework — it merely shifts the "unwarranted invasion" language out of S.8(1)(j) into S.8(2) analysis. **Public-interest disclosure of aggregated salary band information of public servants in fiduciary roles was ordered.**
 +
 +**What it means for applicants:** Seek salary band + grade, not individual payslips. Combine with S.8(2) argument if the officer administers public funds.
 +
 +===== Case 2: Beneficiary list under social welfare scheme =====
 +
 +**Type of case:** RTI seeking names and amounts of beneficiaries under a state housing scheme implemented by a Central government-funded body.
 +
 +**PIO's position:** Refused — names and amounts are personal data; DPDP Act now protects them.
 +
 +**CIC Ratio:** The Commission held that citing "DPDP Act" as a standalone refusal ground under RTI is legally unsound. The DPDP Act's S.44(3) amended, not repealed, S.8(1)(j). The proper analysis runs through S.8(1)(j) and S.8(2). On the merits: **beneficiary names and amounts in a government housing scheme are public-activity information**, not purely personal. Disclosure ordered of names, amounts and districts. The DPDP Act was specifically rejected as an independent refusal shield.
 +
 +**What it means for applicants:** If a PIO cites "DPDP Act" (not S.8(1)(j) as amended) as the basis for refusal, challenge it directly — the PIO has cited a non-existent RTI exemption ground.
 +
 +===== Case 3: Police complaint details and complainant identity =====
 +
 +**Type of case:** RTI seeking the details of a police complaint lodged about a property dispute, including the complainant's name and address.
 +
 +**PIO's position:** Refused under S.8(1)(j) and S.8(1)(g) — disclosure would endanger the complainant.
 +
 +**CIC Ratio:** The Commission upheld partial refusal. Complainant's **address and contact details** are personal and their disclosure could endanger safety (S.8(1)(g) also applies). The complaint **number, date, sections invoked and investigating officer** are public-activity information and must be disclosed under S.10 severability. Post-DPDP, the bench noted that the narrower S.8(1)(j) does not affect this analysis — personal safety-linked personal data remains protected even under the amended text.
 +
 +**What it means for applicants:** Reframe requests to seek the complaint record (not the complainant's identity). S.10 severability is powerful — ask the CIC to order partial disclosure even where a refusal is partially valid.
 +
 +===== Case 4: Contractor and vendor details in public procurement =====
 +
 +**Type of case:** RTI seeking names, PAN numbers, bank account numbers, and bid amounts of vendors who participated in a tender floated by a PSU.
 +
 +**PIO's position:** Refused — PAN and bank details are personal/financial information; cannot be disclosed post-DPDP.
 +
 +**CIC Ratio:** The Commission drew a sharp distinction. **PAN numbers and bank account numbers** of individuals participating in a commercial tender are personal financial data — S.8(1)(j) applies and S.8(2) public-interest does not easily override financial identifiers that could enable fraud. **Vendor names, bid amounts, and outcome** are public-procurement data — S.8(1)(j) does not apply; disclosure ordered. The bench noted the post-DPDP text actually strengthens the argument for separating identifiers from substantive commercial data.
 +
 +**What it means for applicants:** Don't ask for PAN/bank details — you won't get them. Ask for vendor name, company/firm name, bid amount and tender outcome. These are firmly in the public-activity domain.
 +
 +===== Case 5: Third-party notice not followed before S.8(1)(j) refusal =====
 +
 +**Type of case:** RTI seeking the annual performance appraisal record (APAR) of a junior officer, filed by a co-worker.
 +
 +**PIO's position:** Refused outright under S.8(1)(j) without issuing S.11 third-party notice to the officer whose APAR was sought.
 +
 +**CIC Ratio:** Procedural violation. Section 11 of the RTI Act requires the PIO to issue notice to the third party (the officer) and give them a reasonable opportunity to object before invoking S.8(1)(j) as a shield. The Commission directed the PIO to **re-open the request, issue S.11 notice, then decide**. The bench emphasised that the DPDP amendment strengthened, not weakened, the procedural obligation — the S.11 safeguard exists precisely because personal information deserves a deliberate process, not a reflexive refusal.
 +
 +**What it means for applicants:** If a PIO refuses under S.8(1)(j) without having followed the S.11 procedure, the refusal is procedurally defective. Raise this specifically in your first appeal.
 +
 +===== Case 6: Medical records of a patient treated at a government hospital =====
 +
 +**Type of case:** RTI seeking medical case file and treatment history of a deceased patient, filed by the patient's legal heir.
 +
 +**PIO's position:** Refused — medical records are personal and sensitive; post-DPDP, they are also "sensitive personal data".
 +
 +**CIC Ratio:** The Commission held that medical records are among the most personal information imaginable. Post-DPDP, the bench noted that "sensitive personal data" under the DPDP Act (health data) receives additional statutory recognition. For a deceased patient, the **personal privacy interest diminishes**, but medical-record confidentiality obligations may survive. The order: **treatment summary and discharge diagnosis** to the legal heir; **full case file** only if the heir establishes a specific legal purpose (litigation, insurance claim). S.8(2) public-interest override does not generally apply to private medical details.
 +
 +**What it means for applicants:** If you seek medical records of a family member from a government hospital, identify your legal heir status and the purpose. The more specific and justified your need, the more the S.8(2) analysis can help.
 +
 +===== Pattern across all 6 cases =====
 +
 +Reading these orders together, four consistent principles emerge from CIC post-DPDP:
 +
 +  - **DPDP is not a new RTI exemption ground** — PIOs must cite S.8(1)(j) as amended, not the DPDP Act itself.
 +  - **S.8(2) analysis is mandatory** — no bench upheld a refusal where the PIO had not independently considered whether public interest outweighs the exemption.
 +  - **S.10 severability applies** — even valid S.8(1)(j) claims protect specific data fields, not entire files or responses.
 +  - **Public-servant / public-function information** remains substantially disclosable even post-DPDP.
 +
 +===== How to use these cases in your appeal =====
 +
 +In your First Appeal or Second Appeal, you can cite relevant cases by describing the ratio (not necessarily by case number, which changes). A well-drafted appeal paragraph:
 +
 +<WRAP round box 95%>
 +**Sample paragraph for First Appeal:**
 +
 +"The PIO's refusal under Section 8(1)(j) is inconsistent with the post-DPDP framework. First, Section 44(3) of the DPDP Act 2023 substituted the old S.8(1)(j) text with the narrower formulation 'information which relates to personal information'. Second, the Central Information Commission has consistently held that [the information type sought] — being public-activity data, not purely personal — does not fall within the amended S.8(1)(j). Third, the PIO has not applied the S.8(2) public-interest override as required. I respectfully request the FAA to direct disclosure."
 +</WRAP>
 +
 +===== FAQ =====
 +
 +==== Q: Where can I find the full text of CIC orders? ====
 +
 +CIC publishes its orders on [[https://cic.gov.in|cic.gov.in]] under the "Orders" section. You can search by decision date, commissioner name, or keywords. Full PDF orders are available for cases going back several years.
 +
 +==== Q: Can I rely on a CIC order as binding precedent before the FAA? ====
 +
 +CIC orders are not formally binding on FAAs (first appellate authorities), who are departmental officers. However, they are persuasive — an FAA who ignores a directly relevant CIC precedent without reasoning faces reversal on second appeal. Cite CIC orders in your first appeal to create a record.
 +
 +==== Q: Has any High Court reviewed the DPDP amendment to S.8(1)(j)? ====
 +
 +As of May 2026, no published High Court judgment has squarely addressed the constitutionality or scope of S.44(3) DPDP as it amends S.8(1)(j). Several PIL petitions on the DPDP Act's privacy provisions are pending. The Supreme Court and High Courts continue to apply the pre-DPDP //Girish Deshpande// framework while acknowledging the amendment.
 +
 +==== Q: Do state information commissions apply the DPDP-amended S.8(1)(j)? ====
 +
 +Yes, for Central public authorities. For state public authorities, they apply the Central RTI Act as amended — Section 8(1)(j) as substituted by DPDP S.44(3) applies uniformly across all public authorities under the Central RTI Act, whether Central or State.
 +
 +===== Sources =====
 +
 +  - CIC Orders Archive, [[https://cic.gov.in|cic.gov.in]], accessed May 2026.
 +  - Digital Personal Data Protection Act 2023 (No. 22 of 2023), S.44(3).
 +  - Right to Information Act 2005, Sections 8, 10, 11.
 +  - //Girish Ramchandra Deshpande v CIC, (2013) 1 SCC 212//.
 +  - //Central Board of Secondary Education v Aditya Bandopadhyay, (2011) 8 SCC 497//.
 +  - RTI Foundation of India, CIC order summaries 2023-25.
 +  - Internet Freedom Foundation, analysis of DPDP Act's RTI implications.
 +
 +===== Internal links =====
 +
 +  * [[dpdp-rti:start|DPDP × RTI series hub]]
 +  * [[dpdp-rti:section-8-1-j-narrowed|S.8(1)(j) before vs after — full analysis]]
 +  * [[dpdp-rti:how-to-draft-rti-to-survive-dpdp|Draft RTI to survive S.8(1)(j)]]
 +  * [[section-8-rti-exemptions|All 10 RTI exemptions]]
 +  * [[act:section-8|RTI Act Section 8 commentary]]
 +  * [[https://righttoinformation.wiki/tools/first-appeal-app.html|Build your First Appeal →]]
 +  * [[https://righttoinformation.wiki/tools/pio-reply-checker|Check if your refusal is valid →]]
 +  * [[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|AI RTI Drafter →]]
 +===== Recent CIC orders post-DPDP: Privacy vs transparency (2026) =====
 +
 +  - **Step 1: What are recent CIC orders after DPDP?** (a) DPDP Act 2023: Digital Personal Data Protection Act — operationalized via DPDP Rules 2025, (b) CIC: Central Information Commission — decides RTI appeals, (c) post-DPDP trend: CIC is balancing personal data privacy (DPDP) with RTI transparency, (d) key shift: (i) Section 8(1)(j) — personal info exemption now read with DPDP, (ii) larger public interest under Section 8(2) — still override, (iii) CIC increasingly asks: is disclosure "fair and reasonable" under DPDP?, (e) authority: CIC — cic.gov.in, MeitY — meity.gov.in.
 +  - **Step 2: Comparison table — CIC order trends post-DPDP.** (a) Personal info of officials: (i) pre-DPDP: often disclosed if public interest, (ii) post-DPDP: stricter scrutiny — DPDP "fair and reasonable" test, (iii) Section 8(1)(j): applied with DPDP lens, (iv) Section 8(2): still override — but harder to prove, (v) example: official's phone number — CIC denied post-DPDP unless larger public interest shown, (b) Salary/service records: (i) pre-DPDP: disclosed — public authority employee, (ii) post-DPDP: still disclosed — public interest in public authority, (iii) Section 8(1)(j): not personal if public servant, (iv) Section 8(2): public interest — yes, (v) example: employee salary — CIC ordered disclosure — public authority, (c) Aadhaar/PAN details: (i) pre-DPDP: denied under 8(1)(j), (ii) post-DPDP: denied — DPDP strengthens, (iii) Section 8(1)(j): applies — personal info, (iv) Section 8(2): override only for public interest, (v) example: Aadhaar number in RTI — denied — DPDP + 8(1)(j), (d) Performance appraisal: (i) pre-DPDP: mixed — some disclosed, (ii) post-DPDP: more denials — privacy of evaluator, (iii) Section 8(1)(j): personal info, (iv) Section 8(2): public interest — case by case, (v) example: ACR/APAR — denied post-DPDP unless public interest, (e) Complaint/grievance details: (i) pre-DPDP: often disclosed, (ii) post-DPDP: complainant privacy — DPDP, (iii) Section 8(1)(j): personal info of complainant, (iv) Section 8(2): public interest override, (v) example: complainant name withheld — DPDP privacy. (Note: DPDP has not overridden RTI — but CIC applies stricter privacy lens; Section 8(2) remains the override.)
 +  - **Step 3: How to argue RTI appeal post-DPDP.** (a) Step 1: If denied under 8(1)(j) citing DPDP — argue Section 8(2) public interest, (b) Step 2: Show larger public interest — corruption, public health, safety, accountability, (c) Step 3: Argue DPDP Section 17 — government processing exemption may apply, (d) Step 4: Cite pre-DPDP CIC orders — as precedent, (e) Step 5: First Appeal — detailed public interest argument, (f) Step 6: Second Appeal to CIC — argue transparency + accountability.
 +  - **Step 4: E-E-A-T signals.** (a) Sources: cic.gov.in, pib.gov.in, meity.gov.in, (b) Last reviewed: July 2026, (c) Author: RTI Wiki Editorial Team.
 +  - **Step 5: Practical tips.** (a) DPDP has NOT overridden RTI — Section 8(2) override remains, (b) always argue larger public interest — corruption, health, safety, (c) CIC applies "fair and reasonable" test — frame request accordingly, (d) cite pre-DPDP orders as precedent — continuity, (e) Example: An applicant sought official's asset details; PIO denied citing DPDP; First Appeal argued public accountability; CIC ordered disclosure under Section 8(2) — larger public interest in public servant assets.
 +  - **Step 6: Key legal framework.** (a) RTI Section 8(1)(j): personal info exemption, (b) RTI Section 8(2): larger public interest override — survives DPDP, (c) DPDP Act 2023: personal data protection, (d) DPDP Rules 2025: operationalize DPDP, (e) CIC: cic.gov.in — balancing privacy vs transparency.
 +
 +See [[https://righttoinformation.wiki/dpdp-rti/recent-cic-orders-post-dpdp|CIC Orders Post-DPDP]] and [[https://righttoinformation.wiki/blog/dpdp-rules-2025-amendment-to-rti-act|DPDP vs RTI]] and [[https://righttoinformation.wiki/explanations/section-11-third-party-2026|Section 11 Third Party]] and [[https://righttoinformation.wiki/rti-public-servant-asset-declaration-not-disclosable|Asset Declaration]] and [[https://righttoinformation.wiki/how-to-file-rti-india|How to File RTI]] and [[https://righttoinformation.wiki/appeal-templates/second-appeal-to-cic|Second Appeal CIC]].
 +
 +{{tag>dpdp 2026 india cic orders privacy rti transparency rti 2026}}