Page 29 - Proceedings of the 2017 ITU Kaleidoscope
P. 29

OPEN DATA & DIGITAL IDENTITY: LESSONS FOR AADHAAR

                                                                    2
                                                 1
                                    Vinod Kotwal , Smriti Parsheera , and Amba Kak  3

                                        1 Ministry of Communications and IT, India
                                   2 National Institute of Public Finance and Policy, India
                                                3 Mozilla Foundation, India



                              ABSTRACT                        companies to query the database for authenticating users.
                                                              Its ability to ‘uniquely’ identify individuals based on their
           Aadhaar, the largest biometric identification system in the   biometric / demographic information and Aadhaar numbers
           world, has been lauded for its promise to bring efficiencies   is the  stated basis  for the  government’s push to  integrate
           to government service delivery, and the stimulus to private   Aadhaar across (and even beyond) government  services.
           sector innovation. However, its claims have been contested,   Over the years, Aadhaar numbers have been linked to the
           and criticized for excesses in terms of potential threats to   transfer of direct cash benefits under schemes like public
           privacy on account of the vulnerabilities of biometric data,   distribution of food grains, employment guarantee benefits,
           mandatory linkage with numerous schemes and the    mid-day  meals in schools, LPG subsidies, etc. It has also
           possibility of mass surveillance through linked databases.   come to be widely used as identification proof for availing
           Even as the debate continues, every day, large volumes of   services like banking and finance, digital payments and
           data are being generated through the use of Aadhaar-  utility connections, among others.
           enabled  authentication and eKYC systems, both by   Despite this rapid proliferation, the  goals and architecture
           government as well as private entities. There has been   of the project have been met with growing resistance. The
           relatively  less  exploration  of  the  resulting  ‘open  data’   Supreme  Court of India is  currently  hearing a series of
           potential of Aadhaar and the manner in which it can   petitions challenging the constitutionality of  Aadhaar, its
           contribute to research, policymaking as well as    compulsory  linkage  for  the  delivery  of  government
           strengthening accountability of the Aadhaar authority   benefits, potential for exclusion of beneficiaries; and impact
           (UIDAI) itself.  The challenge is  to find ways to nudge   on privacy, among others. These hearings recently led to a
           UIDAI and all users of Aadhaar towards greater sharing of   pronouncement by a  nine  judge bench of the Indian
           data, in privacy-protecting ways that do not create risks for   Supreme Court that there exists a fundamental right  to
           Aadhaar-number holders. At this stage, we  lean towards   privacy in India, which cannot be denied except through a
           aggregate statistics as a means to open data while   fair, just and reasonable procedure established by law. The
           following the strictest standards of privacy.      Court also spoke of other tests to question the existence of a
                                                              legitimate  state aim and proportionality of the  measure to
           Keywords — Aadhaar, digital identity, open data, privacy   achieve that aim (Bhandari et al, 2017 [3]). These tests will
                                                              now be applied for testing the constitutionality of Aadhaar.
                                                              While the judicial determination of these issues remains
                          1. INTRODUCTION                     pending, the Aadhaar database continues to be encouraged
                                                              by the government and UIDAI as  the  focal point of  a
           Aadhaar, meaning foundation, refers to a 12-digit random   rapidly evolving data ecosystem. Hence there is a need to
           identification  number issued  by the Unique Identification   examine the data emanating from the Aadhaar system, and
           Authority of India (UIDAI). Originally established under an   its varied uses. Aadhaar is a publicly funded resource, and
           executive order in January, 2009, UIDAI came to become a   as such, there is a strong case for promoting the disclosure
           statutory body under the  Aadhaar (Targeted Delivery of   of data points that can facilitate research, sound policy
           Financial and Other Subsidies, Benefits and Services) Act,   making as well strengthen the accountability of the UIDAI
           2016 (“Aadhaar  Act”). The project currently holds a   itself.
           biometric database of more than 1,150 million individuals.   In this paper, we (i) identify the various streams of data
           Covering over 85 percent of India’s population, it is the   generated both by the Aadhaar system, as well as its varied
           largest national biometric database in the world.    applications  across sectors; (ii) identify the existing
           From  its  inception, Aadhaar was  a unique government   incentives for public and private sector to create open data;
           project - in part due to its collaboration with technologists   and (iii) suggest principles and an  implementation
           and entrepreneurs, and a focus on the potential applications   framework to guide the release of more open data through
           or use-cases the Aadhaar could lend itself to. This is also   Aadhaar.
           reflected in its  API-based  architecture that  allows private




           978-92-61-24291-6/CFP1768P-ART © 2017 ITU      – 13 –                                   Kaleidoscope
   24   25   26   27   28   29   30   31   32   33   34