Aadhaar

1. What Aadhaar is and how it works

Aadhaar is a foundational identity platform rather than a scheme-specific beneficiary card. UIDAI enrols individuals, assigns a unique number and provides authentication and verification services. Enrolment ordinarily involves demographic information, a photograph, fingerprints and iris scans. Biometric de-duplication seeks to prevent multiple Aadhaar numbers being issued to the same individual. The statutory definition of a resident generally requires residence in India for at least 182 days during the preceding twelve months; separate provisions permit enrolment of eligible non-resident Indian passport holders.

Authentication checks submitted identity information against records in the Central Identities Data Repository. Depending on the permitted service, this may involve fingerprints, iris, face or a one-time password. A standard authentication response confirms whether the submitted information matches; authorised e-KYC provides specified identity information under the applicable legal framework. Offline verification, including verification through a digitally signed secure QR code, can establish authenticity without conducting an online authentication transaction.

Aadhaar must be distinguished from citizenship, entitlement and payment. Possessing a number does not prove citizenship, establish eligibility for a pension or guarantee that money reaches the intended account. Children below five receive Aadhaar without fingerprint or iris capture, with mandatory biometric updates prescribed at ages five and fifteen. This illustrates why identity systems require lifecycle maintenance rather than one-time enrolment alone.

2. Legal and constitutional framework

The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 provides the principal statutory framework. Section 7 permits the Union or a State government to require authentication or proof of possession of Aadhaar for specified subsidies, benefits or services funded from the relevant Consolidated Fund. An individual without an assigned number must be offered enrolment and alternative viable identification pending assignment. Section 9 expressly states that Aadhaar is not evidence of citizenship or domicile.

In K.S. Puttaswamy v. Union of India, 2017, a nine-judge Supreme Court bench unanimously recognised privacy as a fundamental right. State interference must have a legal basis, pursue a legitimate objective and satisfy proportionality and safeguards against abuse. These standards make the purpose, necessity and design of digital identity requirements constitutionally significant.

In the 2018 Aadhaar judgment, the Court upheld the core programme and Section 7, while restricting its reach. It invalidated the provision permitting private use merely on the basis of a contract and rejected compulsory Aadhaar linking for bank accounts and mobile connections under the measures challenged. It upheld Aadhaar–PAN linkage under Section 139AA of the Income-tax Act. The majority accepted enactment as a Money Bill, although the broader interpretation of Money Bill provisions subsequently became subject to larger-bench reconsideration.

The 2019 amendment created a revised framework for voluntary authentication and offline verification, including regulated voluntary use for banking and telecom identification. Consent, lawful authorisation and viable alternatives remain crucial. The Digital Personal Data Protection Act, 2023 forms part of the broader data-governance framework; it should not be treated as replacing Aadhaar-specific safeguards or constitutional scrutiny.

3. Contribution to public service delivery

Aadhaar can reduce repetitive documentation, support beneficiary de-duplication and enable identity verification across locations. Within the Jan Dhan–Aadhaar–Mobile framework, it supports aspects of Direct Benefit Transfer and financial inclusion. However, DBT is a wider administrative and payment reform: bank-account-based transfers can also operate without Aadhaar-based payment routing. Identity verification, programme databases, banking infrastructure and grievance resolution perform distinct functions.

The Aadhaar Payment Bridge routes eligible government payments using Aadhaar-linked bank mapping. The Aadhaar Enabled Payment System supports interoperable transactions, such as cash withdrawal and balance enquiry, commonly through business correspondents. These systems can reduce travel and transaction costs, especially where conventional bank branches are distant, but they require reliable connectivity, transparent account mapping and protection against fraud.

In the Public Distribution System, Aadhaar-enabled identification supports beneficiary verification and the portability architecture associated with One Nation One Ration Card. Migrant households may access entitlements away from their original fair-price shop. Benefits nevertheless depend on correct ration-card records, stock availability, functioning devices and workable exception procedures. Claims of fiscal savings must separate removal of genuine duplicates from exclusion, revised eligibility and improvements unrelated to Aadhaar.

4. Exclusion, privacy and accountability risks

Authentication can fail because of worn fingerprints, disability, ageing, poor connectivity, device errors or outdated records. A genuine beneficiary may also face incorrect Aadhaar seeding or a payment mapped to an unexpected account. These are different problems requiring different remedies. Treating every failed match as impersonation converts a technical error into denial of a legal or welfare entitlement.

Privacy risks extend beyond compromise of the central repository. Publicly exposed beneficiary lists, excessive collection, insecure local databases and cross-linking of records can enable profiling or identity misuse. A common identifier increases the potential for connecting information across sectors. Function creep occurs when an identifier introduced for a limited purpose becomes routinely demanded for unrelated activities without demonstrating necessity.

Consent is often weak where a person needs food, wages or a pension and perceives no practical alternative. Responsibility is also fragmented among UIDAI, scheme departments, banks, payment intermediaries and service providers. Citizens may be repeatedly redirected between institutions. Governance assessment must therefore examine who can correct records, trace missing payments, review wrongful denial and provide a time-bound remedy, not merely whether authentication is technically accurate.

5. Principles for rights-based digital governance

The first principle is that an authentication failure should not automatically become an entitlement failure. Departments should operationalise lawful alternatives and exception handling, including alternative documents, permitted authentication modes and accountable manual verification. Frontline personnel require clear instructions, resources and protection for using authorised exceptions. Assisted enrolment and updating are especially important for older persons, persons with disabilities, migrants and remote communities.

The second principle is privacy and security by design. Agencies should collect only necessary information, limit access, use encryption, maintain audit trails and avoid publishing Aadhaar numbers. Masked Aadhaar, Virtual ID and offline verification can reduce unnecessary exposure, although no single feature eliminates all risks. Citizens should receive understandable information about the purpose of collection, available alternatives and complaint mechanisms.

The third principle is measurable accountability. Independent evaluation should track authentication failures, services denied, payment delays, grievance disposal and fraud alongside financial savings. Social audits and accessible local appeal mechanisms should complement technical audits. Any expansion into new uses should demonstrate legal authority, necessity and proportionality. Aadhaar is most defensible when it simplifies access while preserving human assistance and enforceable rights.

Previous year questions

No UPSC question has been asked directly on this micro-topic yet. Use the practice questions below.

Practice questions