The Unique Identification Authority of India (UIDAI) is looking into a complaint of misuse of personal data while issuing unique “Aadhaar” numbers to individuals, its first case of breach of privacy.
“The contact centre of UIDAI is handling the grievances and complaints of all stakeholders. They have not received any specific complaint related to privacy concerns while collecting individual data. However, a complaint regarding misuse of address proof was received,” the authority said in reply to an RTI query.
However, it did not give details of the complaint, received this year, and the complainant.
“The contact centre has registered a complaint and forwarded the same to the concerned department,” the authority said without elaborating on it.
The complaint cites possibility on the vulnerability of individual data being collected by UIDAI.
“The authority envisions a balance between privacy and purpose when it comes to the information it collects on residents. The agencies may store the information of the residents they enrol if they are authorised to do so, but will not have access to the information in the Aadhaar database. The UIDAI will answer all requests to authenticate identity only through a ‘Yes’ or ‘No’ response,” the reply said.
The authority is mandated to issue every citizen a 12-digit unique identification number linked to the resident’s demographic and biometric information, which they can use to identify themselves anywhere in India, and to access a host of benefits and services.
The UIDAI plans to enter into a privacy contract with all registrars authorised to enrol individuals for Aadhaar.
“The authority will also enter into contracts with registrars to ensure the confidentiality of the information they collect and store. The data will be in electronic format,” it said in reply to RTI query filed by PTI.
Registrars are typically departments or agencies of the state govern-ment/Union territory, public sector undertakings and other agencies and organisations who interact with residents, in the normal course of implementation of some of their programs, activities or operations.