Imagine filing a Right to Information application to find out whether a government contractor's relative was irregularly awarded a tender, or whether a public official's assets grew suspiciously during their term. Under the old rule, an authority had to weigh your right to know against the official's privacy before refusing. Under the amended law, the authority can now simply say the information is "personal" and close the file — no balancing, no public-interest test. That single change, tucked into India's new data protection statute, is at the heart of a constitutional challenge that has quietly been building since the law was passed in 2023.