Privacy and freedom of expression are often presented as complementary rights in democratic societies. Journalists need privacy protections to safeguard sources, communicate securely, and conduct investigations without fear of surveillance. At the same time, citizens have a legitimate right to control how their personal information is collected, stored, and shared.
However, in recent years, a growing number of journalists, media organizations, and press freedom advocates have warned that privacy and data protection laws are increasingly being used to challenge public-interest reporting. While these laws are designed to protect individuals from misuse of personal information, they can also become tools for suppressing scrutiny, discouraging investigations, and limiting access to information that is essential for accountability.
The result is a difficult question facing democracies worldwide: how can societies protect privacy without undermining journalism?
When privacy rights collide with press freedom
The tension between privacy and journalism is not new. Journalists routinely process personal information while investigating corruption, financial misconduct, abuse of power, organized crime, and human rights violations.
Recognizing this reality, the European Union’s General Data Protection Regulation (GDPR) includes specific protections for journalism. Article 85 requires member states to reconcile the right to data protection with freedom of expression and information, including journalistic activities. It also allows exemptions from certain GDPR requirements when necessary to protect journalism and the public’s right to know.
In principle, these provisions acknowledge that privacy rights cannot automatically override public-interest reporting. Yet the practical application of privacy laws has often proven more complicated.
The rise of GDPR-based legal threats
Across Europe, journalists have reported receiving complaints, legal threats, and lawsuits based on data protection regulations. In some cases, individuals or organizations subject to investigative reporting argue that journalists unlawfully processed personal data while gathering or publishing information.
Press freedom organizations have increasingly described some of these actions as a new form of Strategic Lawsuits Against Public Participation (SLAPPs). Rather than seeking to protect privacy, critics argue that these cases are sometimes used to burden reporters with costly legal proceedings and discourage further investigations.
Human Rights Watch’s 2025 assessment of press freedom in Greece highlighted concerns that journalists have faced legal threats and lawsuits based on both defamation and EU data protection laws. The organization warned that such legal pressure contributes to self-censorship and creates obstacles to independent reporting.
Even when claims ultimately fail, the process itself can impose high financial and psychological costs on journalists and smaller media outlets.
Privacy laws and access to information
Privacy legislation can also affect journalism indirectly by restricting access to government-held information.
A notable example emerged in India, where journalists and transparency advocates challenged provisions within the country’s Digital Personal Data Protection Act. Critics argued that amendments linked to the law could make it easier for authorities to deny requests for information by broadly classifying records as “personal information.”
Media organizations, including the Editors Guild of India and The Reporters’ Collective, have warned that the law could chill investigative journalism and make it significantly harder for reporters to obtain information about public officials and government projects. Unlike similar frameworks in some other democracies, India’s legislation does not contain explicit journalistic exemptions.
This illustrates a broader concern among press freedom advocates: privacy protections can sometimes be interpreted so broadly that they reduce public access to information about government decision-making and public officials.
Surveillance in the name of privacy and security
Another challenge arises when governments invoke privacy, security, or data protection justifications to justify surveillance.
Confidential communication is essential to investigative journalism. Sources are often willing to expose corruption or wrongdoing only if their identities remain protected. When authorities gain access to journalists’ communications, source confidentiality can be compromised.
Recent developments in the United Kingdom illustrate these risks. In December 2024, the Investigatory Powers Tribunal ruled that the Police Service of Northern Ireland (PSNI) and the Metropolitan Police had unlawfully conducted surveillance on investigative journalists Trevor Birney and Barry McCaffrey. The tribunal found that the surveillance violated protections afforded to journalists and their sources and ordered compensation for the reporters.
The ruling reinforced a fundamental principle of press freedom: protecting journalistic sources is essential to ensuring that information of public interest can reach the public without fear of retaliation.
The public interest test
At the center of this debate lies the concept of public interest.
Most democratic legal systems recognize that publishing certain personal information may be justified when it reveals corruption, misconduct, abuse of power, threats to public safety, or other matters of significant public concern.
This principle is reflected in Article 85 of the GDPR, which explicitly requires member states to balance data protection rights with freedom of expression and information, including journalism.
The challenge is determining where that balance should be drawn. Privacy advocates argue that journalists should not receive blanket exemptions from rules designed to protect individuals. Press freedom defenders counter that overly restrictive interpretations of privacy law can prevent the public from learning about issues that directly affect democratic governance.
Why this matters for democracy
The debate over privacy and journalism is not simply a legal dispute. It concerns the ability of societies to hold powerful actors accountable.
Without strong privacy protections, citizens may become vulnerable to surveillance, data exploitation, and misuse of personal information. Without robust protections for journalism, corruption, misconduct, and abuses of power may remain hidden from public view.
A healthy democratic system requires both rights to coexist.
The challenge for lawmakers is to ensure that privacy laws protect individuals without becoming tools for censorship, intimidation, or the suppression of public-interest reporting. Likewise, journalists must continue to apply ethical standards when handling personal information while defending their essential role in informing the public.
Conclusion
Privacy and freedom of expression should not be viewed as opposing values. Both are fundamental human rights that support democratic participation and accountability.
Yet the growing use of privacy and data protection laws against journalists demonstrates how easily this balance can become distorted. Whether through lawsuits, restrictions on access to information, or surveillance measures, privacy frameworks can sometimes be leveraged to hinder investigative reporting.
For defenders of press freedom, the goal is not weaker privacy protections. It is ensuring that privacy laws are implemented in ways that safeguard individual rights while preserving the public’s right to know.
As journalism continues to adapt to an increasingly data-driven world, finding that balance will remain critical to the future of democratic societies.