RTI Act & Private Companies: What HR Professionals Must Know in 2026

Does RTI apply to private companies in India

Does RTI apply to private companies in India ?

Every HR professional in India eventually faces this moment: someone walks in with an RTI application, demands access to an employee’s salary records, and insists the company is legally bound to comply. The confidence in that demand can be unsettling — especially when the legal boundaries of the Right to Information Act are not completely clear.

This guide cuts through that confusion. It explains what the RTI Act actually covers, where its authority ends, and how HR teams in private organizations should respond when information requests land on their desks — whether they come directly or through a government office.

Read: SHe-Box Registration in India


Understanding the Right to Information Act, 2005

Enacted in June 2005, the Right to Information Act fundamentally changed the relationship between Indian citizens and government institutions. Before this law, accessing official records was a bureaucratic obstacle course with no guaranteed outcome. Information requests could be ignored, delayed indefinitely, or denied without explanation.

The Act established a structured, time-bound process: any citizen could submit a written request to a designated Public Information Officer, pay a nominal fee, and expect a response within 30 days. For matters involving personal safety or liberty, that window shrinks to 48 hours.

At its core, the RTI Act exists to serve three interconnected goals:

Making Governance Visible

Public money funds government operations, and taxpayers have a legitimate interest in knowing how those funds are used. RTI allows citizens to trace government expenditure, scrutinize policy decisions, and examine the reasoning behind administrative choices.

Holding Authorities Accountable

Accountability follows transparency. When public officials know that their decisions are subject to citizen review, it creates an incentive for careful, justifiable decision-making rather than arbitrary or self-serving choices.

Disrupting Corruption Cycles

Corruption flourishes in information gaps. When citizens can request documentation of who received a government contract, how recruitment decisions were made, or what criteria determined a benefit allocation, those gaps narrow considerably.

Read: Gratuity Eligibility.


Who Has the Right to File an RTI Application?

Any Indian citizen can file an RTI application. There is no requirement to explain why the information is needed, no qualification threshold, and no minimum age restriction for adult citizens. The process is deliberately accessible.

A citizen may use RTI to inquire about:

• How a government department spent its allocated budget
• The criteria used in a public sector recruitment process
• The status of a pending government application or permit
• Rules and procedures governing a public institution
• Records maintained by any public authority

What RTI cannot do is compel a private organization to respond. The citizen-to-government direction is central to how this law functions.


Which Organizations Fall Under the RTI Act?

Section 2(h) of the RTI Act defines the term ‘public authority’ — and this definition is the single most important boundary in understanding the law’s reach.

A public authority includes any body that is:

• Established or constituted by the Constitution of India
• Created through a law passed by Parliament or a state legislature
• Established by a notification or order issued by the central or state government
• Substantially owned, controlled, or financed by government funds

Practically, this covers:

• All central and state government ministries and departments
• Public sector banks and financial institutions
• Government-run universities and research institutions
• Municipal corporations and panchayati raj bodies
• State transport corporations and utility boards
• Regulatory bodies such as SEBI, TRAI, and similar statutory authorities

Read : Bell Curve in Performance Appraisal


Does the RTI Act Apply to Private Companies?

No — and this answer is legally straightforward.

Private companies are not public authorities under the Act. A privately owned IT firm, manufacturing company, hospital, or educational institution does not fall within the law’s scope simply because it operates within India or employs Indian citizens.

This means the following types of organizations have no obligation to respond to RTI applications:

• Privately held companies and listed corporations without majority government ownership
• Private hospitals and diagnostic centres
• Private schools and universities (unless substantially government funded)
• NGOs, trusts, and foundations operating with private funding
• Technology startups and service companies


The Indirect Route: When Government Offices Hold Private Company Data

There is one significant nuance HR professionals should understand. If a private company has submitted documents to a government authority — such as a labour department filing, a compliance certificate, a pollution clearance, or a registration document — a citizen could request that information from the government office through RTI.

In this scenario, the RTI is filed against the government department, not the company. The department then determines what can be disclosed, subject to its own exemption analysis. Even then, personally identifiable or commercially sensitive information may still be withheld.

Read: Performance Improvement Plan (PIP): A Practical Guide for HR


Key Exemptions: What RTI Cannot Force Anyone to Disclose

Even within public authorities, the RTI Act recognizes important boundaries. Section 8 of the Act lists categories of information that are shielded from mandatory disclosure.

For HR professionals, the most relevant is Section 8(1)(j), which protects personal information where disclosure would constitute an unwarranted invasion of privacy — particularly where the information has no bearing on public activity or interest.

Information typically shielded under this provision includes:

• Individual employee salary and pay structure details
• Annual performance appraisal scores and feedback
• Medical records and health-related documentation
• Records of disciplinary proceedings
• Personal contact and family information

Courts have consistently reinforced this protection. In the landmark 2013 judgment of Girish Ramchandra Deshpande vs Central Information Commission, the Supreme Court held that an employee’s service record, performance evaluations, and personal details constitute private information that cannot be disclosed under RTI without a compelling public interest justification. More recently, the Rajasthan High Court affirmed that individual pay details similarly fall outside the RTI Act’s disclosure mandate.


Common RTI-Style Requests HR Departments Receive

Even though private companies are not subject to RTI, HR teams routinely receive requests formatted like RTI applications — often because the person submitting them either misunderstands the law or hopes the formal presentation will create pressure to comply.

Here are the most frequent types and how to approach them:

Salary and Compensation Inquiries

Often arising in matrimonial disputes, maintenance claims, or personal conflicts, these requests ask for an employee’s salary slip, bonus details, or pay grade. Salary data is confidential employment information. Without a court order or the employee’s written consent, it should not be released.

Employment Verification Requests

Requests asking whether a named individual works at the company, their designation, or their date of joining are best handled through standard HR verification procedures. Background check agencies operate through defined protocols for this reason — not through informal RTI-style submissions.

Recruitment Outcome Queries

Rejected candidates occasionally submit RTI-styled requests asking for interview marks, selection criteria, or information about who was hired. While companies may explain their general recruitment process, sharing another applicant’s personal information is inappropriate and potentially unlawful.

Disciplinary and Conduct Records

Requests for misconduct investigation records or disciplinary action details are particularly sensitive. These documents are part of an employee’s confidential service file and should only be shared when legally compelled.

Attendance and Leave Data

Leave history and attendance records appear in personal disputes — often to demonstrate irregular working hours or absence. These are internal HR records. Third parties have no basis to access them without legal authority.

Read: Can a Probationary Employee Be Terminated Without Notice Period in India?


What HR Should Do When Requests Come Through Government Offices

A more complex situation arises when a request does not come directly to the company but through a government department. Someone may file an RTI application with the Labour Department or another authority, seeking information about a named employee — and that department may forward the query to the employer.

This indirect route can create pressure on HR teams who assume that a government forwarding creates a legal disclosure obligation. It does not — at least not automatically.

Even through this channel, the following categories remain protected:

Income Tax and Financial Records

An employee’s ITR documents reveal investment strategies, income sources beyond employment, and personal financial planning. These are personal financial records regardless of who requests them or how the request is framed.

Performance Appraisals and Internal Evaluations

Appraisal reports exist to support internal management decisions. They are not public documents and carry no public interest dimension that would justify forced disclosure.

Disciplinary Inquiry Records

Internal investigation reports, warning letters, and show cause notices relate to employment matters between employer and employee. They are not suitable for external disclosure without a court order.

Medical and Health Information

Health data is among the most sensitive categories of personal information. Medical leave records, reimbursement claims, and health certificates fall under both employment confidentiality and the broader principles of health privacy.

Contact and Family Details

Residential address, phone numbers, bank account information, and family details collected during onboarding are sensitive personal data. Releasing these without formal legal direction could expose the organization to liability.

HR’s standard practice in such situations should be to respond to government offices in writing, acknowledge the query, and request formal legal documentation — whether a court order or an official statutory notice — before sharing any employee information.


Two Practical Scenarios HR Professionals Should Know

Scenario One: Direct RTI Application to a Private Company

A woman involved in a divorce proceeding submits an RTI application to her husband’s private sector employer, requesting his current salary and benefits details. The application is formatted professionally and references the RTI Act.

The appropriate HR response: politely inform the applicant in writing that the company is a private entity, not a public authority under Section 2(h) of the RTI Act, and therefore has no legal obligation under that law. If the matter is before a court, income or salary details can be directed through the court process, where a proper discovery or direction order may be obtained.

Scenario Two: RTI Filed Through the Labour Department

The same individual instead files an RTI application with the Labour Department, asking for salary information about the employee. The department, which may hold some employment records from statutory filings, may query the employer.

Even in this situation, specific salary details are personal information protected under Section 8(1)(j). The Labour Department would typically not be required to disclose individual salary figures, and the employer should not proactively share them without formal legal direction. HR should communicate through official written channels only and await specific instructions before disclosing anything.

Read: Handling Fake Experience Certificates: Can We Terminate Without Notice


Clearing Up Common Misconceptions

Myth: RTI Applies to All Registered Organizations

Registration under the Companies Act, Shops and Establishments Act, or any other statute does not bring an organization within RTI’s scope. The public authority definition is specific and does not extend to all registered entities.

Myth: Anyone Can Demand Any Company’s Internal Records

Internal records of private companies — financial data, HR files, operational documents — are not accessible through RTI. Citizens have other legal mechanisms such as court discovery or consumer complaint processes, but RTI is not one of them.

Myth: Employee Salaries Are Public Information

This is directly contradicted by Supreme Court precedent. Salary information is personal data. Even within government organizations where RTI does apply, individual pay details are frequently withheld under privacy protections.

Myth: Transparency Requires Full Disclosure

Transparency in the RTI sense applies to governance systems, institutional decision-making, and public spending — not to personal records of individuals working within organizations. These are distinct categories with very different legal treatment.


How to Handle RTI Applications Routed Through a Government Department

When an RTI application reaches a private company indirectly — forwarded by a Labour Department, a licensing authority, or any other government office — HR must respond strategically rather than reactively. The fact that a government body has forwarded the request does not automatically create a legal obligation to disclose employee information.

The first step is to carefully read the forwarded communication. Identify whether it is a formal statutory notice, an informal departmental query, or simply a forwarding of a citizen’s RTI application. These carry very different legal weights. An informal forwarding creates no binding disclosure obligation on a private employer.

HR should respond to the department in writing within a reasonable timeframe — typically 10 to 15 working days. The response should acknowledge receipt of the query, state clearly that the organization is a private entity not covered under the RTI Act, and specify that no employee information will be shared without a court order or a formal statutory direction from the appropriate authority.

Where the forwarded request concerns general employment compliance data — such as headcount, wage registers, or statutory filings already submitted to the department — HR may cooperate on those specific points while continuing to protect individual employee records.

Every communication exchanged in this process should be documented, dated, and retained. If the matter escalates or eventually proceeds to a tribunal or court, that paper trail becomes the organization’s first line of defence. Involving the company’s legal counsel at an early stage is strongly advisable when requests involve sensitive employee data or when the forwarding department applies persistent pressure for disclosure.


Legal Consequences When RTI Routed Through Government Officials Goes Unanswered

When a government department forwards an RTI-related query to a private company and that communication is ignored entirely, the consequences fall primarily on the concerned Public Information Officer (PIO) within the government department — not directly on the private employer. Under Section 20 of the RTI Act, a PIO who fails to respond within the stipulated timeframe can face a penalty of ₹250 per day, up to a maximum of ₹25,000, along with disciplinary action.

However, if a private company repeatedly ignores formal notices from statutory authorities related to such matters, it risks being held in contempt if the issue reaches a tribunal or court. Non-cooperation with government departments can also damage the organization’s compliance standing. HR must always acknowledge and formally respond to government communications — even if that response simply asserts the company’s legal position — to avoid unnecessary regulatory or legal complications.

Read: Notice Period in India: Legal Rules, HR Practices, and Employee Rights Explained


What This Means for HR Practice Going Forward

The Right to Information Act represents one of India’s most significant democratic reforms. It has empowered millions of citizens to engage with government systems in ways that were simply not possible before 2005. Its value for public accountability is not in question.

What HR professionals need to understand clearly is where that power stops.

Private organizations operate outside RTI’s direct authority. Employee records — salary, health, performance, discipline, and personal details — are confidential regardless of who asks for them or how the request is formatted. The duty to protect this information is not just a legal compliance matter. It is a fundamental part of building a trustworthy, fair workplace.

When HR teams respond to RTI-style requests with clarity, firmness, and documented reasoning, they protect employees, reduce organizational risk, and demonstrate that data governance is taken seriously.

That is not a bureaucratic response. It is good HR practice.


Still have questions? Here are some commonly asked questions about RTI Act applicability to private companies in India.

Frequently Asked Questions: RTI Act and Private Companies


1. Does the RTI Act apply to private companies in India?

No. The RTI Act, 2005 applies only to public authorities defined under Section 2(h). Private companies are not covered unless they are substantially owned, controlled, or funded by the government.


2. Can I file an RTI to get an employee’s salary details from a private company?

No. Salary details of employees in private companies cannot be obtained through RTI. Such information is considered personal data protected under Section 8(1)(j) of the RTI Act.


3. What is a “public authority” under the RTI Act?

A public authority is a body established by the Constitution, law, or government notification, or one that is owned, controlled, or substantially financed by the government.


4. Can information about a private company be obtained through RTI indirectly?

Yes, in limited cases. If a private company submits documents to a government department, those records may be requested from that department through RTI.


5. Is a private company obligated to reply to an RTI application?

No. Private companies are not legally required to respond to RTI applications. However, if a government department forwards a query, HR should respond formally stating the company is not covered under RTI.


6. What does Section 8(1)(j) of the RTI Act protect?

Section 8(1)(j) protects personal information such as salary details, performance appraisals, medical records, disciplinary records, and personal contact information from disclosure.


7. Can a wife use RTI to get her husband’s salary details from his private employer?

No. RTI cannot be used to obtain salary details from a private employer. In divorce or maintenance cases, such information must be obtained through a court order.


8. What happens if a government PIO does not respond to an RTI application within 30 days?

The Public Information Officer can be penalised ₹250 per day of delay up to ₹25,000 under Section 20 of the RTI Act, and disciplinary action may also be recommended.


9. Are private schools, hospitals, and NGOs covered under the RTI Act?

Only if they receive substantial government funding or control. Purely private institutions operating without government support are generally not covered.


10. How should HR in a private company respond when an RTI-style request arrives?

HR should reply in writing stating that the organization is a private entity not covered under the RTI Act and that employee information is confidential unless ordered by a court.


11. Can RTI be filed against a private company registered under the Companies Act?

No. Registration under the Companies Act does not make a company a public authority. Only organizations owned, controlled, or substantially funded by the government fall under the RTI Act.


12. Can the Labour Department force a private company to disclose employee salary details through RTI?

No. The Labour Department cannot compel a private employer to disclose employee salary details through RTI. Such information is personal and protected under privacy provisions, unless a court directs disclosure.


13. What should HR do if someone sends an RTI application directly to the company?

HR should respond politely stating that the organization is a private entity not covered under the RTI Act, 2005, and therefore has no legal obligation to provide information under RTI.