Supreme Court Verdict on Aadhaar - I

Similar documents
VISION IAS

Bar & Bench (

Bar & Bench (

CIN (if applicable): Organization PAN (if applicable): Address: City: Pin code: District: Fax: State:

Using Identification for Development: Some Guiding Principles

January Caux Initiatives for Business Global Secretariat Asia Plateau Panchgani India

Smart Voting System using UIDAI

Date and Event. 22/12/2008 The Information and Technology Act, 2000 was. 22/12/2008 The Information and Technology Act, 2000 was

BIOMETRICS - WHY NOW?

Defying Fundamental Rights with Impunity

SUMMARY INTRODUCTION. xiii

Biometrics: primed for business use

Training Module on UIDAI and Aadhaar UIDAI. Unique Identification Authority of India. Version: 1.4_ Release date:

EDPS Opinion 7/2018. on the Proposal for a Regulation strengthening the security of identity cards of Union citizens and other documents

A Renewed Attack on Privacy: on Aadhaar Bill

CONSTITUTIONAL VALIDITY OF AADHAAR: IS IT A VIOLATION OF RIGHT TO PRIVACY?

ORDINANCE _ BOROUGH OF NEW ALBANY BRADFORD COUNTY, PENNSYLVANIA

ELECTION COMMISSION OF INDIA Nirvachan Sadan, Ashoka Road, New Delhi

Legal aspects of biometric data processing : current state of affairs. Dr. E. J. Kindt MIPRO 2015

THE PERSONAL DATA PROTECTION BILL, 2006

MINISTRY OF COMMUNICATIONS AND INFORMATION TECHNOLOGY (Department of Information Technology) NOTIFICATION New Delhi, the 11th April, 2011

Policy Framework for the Regional Biometric Data Exchange Solution

Adopted on 23 June 2005

Recommended Practice 1701 l

Consumers at a protest demanding that LPG supply be delinked from Aadhaar, in Visakhapatnam on January 6, P SUBRAHMANYAM

... moves to amend H.F. No. 3959, the third engrossment, as follows:

1 PROPOSED DRAFT BILL

Hong Kong General Chamber of Commerce Roundtable Luncheon 13 April 2016 Collection and Use of Biometric Data

Public Consultation on the Smart Borders Package

Assess the awareness level of people on Aadhaar Card as public wellbeing

Identity Verification in Passport Issuance

AS INTRODUCED IN LOK SABHA

THE PRIVACY (PROTECTION) BILL, 2013

The Personal Data Protection Bill, 2018 Issues, Possible Solutions, and Recommendations

APPLICABILITY OF JUSTICE PUTTUSWAMY VS UNION OF INDIA TO NON-STATE ENTITIES

Changes in Schengen visa application process

PRIVACY IMPLICATIONS OF BIOMETRIC DATA. Kevin Nevias CISSP, CEH, CHFI, CISA, CISM, CRISC, CGEIT, CCNA, G /20/16

IDENTIFICATION FOR DEVELOPMENT (ID4D)

Compendium of Good Practices in Identity Management

Biometrics Technology for Human Recognition

Collaborative Solutions to avoid frauds in a country where there is NO National Foundational ID. November 2017 FiGi Symposium Bengaluru, India

27. National ID Cards

Machine Readable Travel Documents: Biometrics Deployment. Barry J. Kefauver

Meijers Committee standing committee of experts on international immigration, refugee and criminal law

Policy Framework for the Regional Biometric Data Exchange Solution

Biometrics from a legal perspective dr. Ronald Leenes

$~49 * IN THE HIGH COURT OF DELHI AT NEW DELHI Date of Order: July 24, W.P.(C) 7444/2018, C.M. APPL. No /2018

IT ACT Dr.V.C.Vivekanandan Dean & Professor of Law RGSOIPL IIT Kharagpur

Council of the European Union Brussels, 1 February 2017 (OR. en)

A combined file and information system description and information document regarding the Data System for Administrative Matters

STIFLING PRIVACY AND INHIBITING DEMOCRACY: A CASE FOR AADHAAR SCHEME IN INDIA

13462/18 BN/cr 1 JAI.1 LIMITE EN

Interest Balancing Test Assessment regarding data processing for the purpose of the exercise of legal claims

THE PERSONAL DATA PROTECTION BILL, 2018: A SUMMARY

International Journal of Research and Review E-ISSN: ; P-ISSN:

All About Impeachment of CJI

Be Happy, Share & Help Each Other!!! Study-IQ education

REGULATION (EC) No 767/2008 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL. of 9 July 2008

International Biometrics & Identification Association

5/6/2009. E toll Database. Census Database. Database. Database. Consumer Balance and Bill Subscriptions. Mobile Connections.

Agreement on arrangements regarding citizens rights between Iceland, the Principality of Liechtenstein, the Kingdom of Norway and the United Kingdom

Bali Process Ad Hoc Group Workshop on Biometrics for Identity Integrity in Immigration India April 2012

What exactly is a money bill?

Novel E-Voting System with Biometric Authentication and Distributed Server System

Data Protection Policy. Malta Gaming Authority

THE PERSONAL DATA (PROTECTION) BILL, 2013

Opinion 3/2016. Opinion on the exchange of information on third country nationals as regards the European Criminal Records Information System (ECRIS)

REPORT VOLUME 6 MAY/JUNE 2017

COMMUNICATION FROM THE COMMISSION TO THE EUROPEAN PARLIAMENT AND THE COUNCIL. Adapting the common visa policy to new challenges

Additional Case study UK electoral system

CHAPTER Committee Substitute for House Bill No. 1277

Secure Voter Registration and Eligibility Checking for Nigerian Elections

An Act to Promote Transparency and Protect Individual Rights and Liberties With Respect to Surveillance Technology

Ad-Hoc Query on Implementation of Council Regulation 380/2008. Requested by FI EMN NCP on 10 th September 2009

NATIONAL VETTING BUREAU BILL 2011 PRESENTED BY THE MINISTER FOR JUSTICE, EQUALITY AND DEFENCE

Government of Pakistan NADRA Headquarters, Islamabad

Ten Years of Reforms Structural impact

for fingerprint submitting agencies and contractors Prepared by the National Crime Prevention and Privacy Compact Council

Case: 1:17-cv Document #: 1 Filed: 08/18/17 Page 1 of 13 PageID #:1

LATEST IN BIOMETRIC TECHNOLOGY IN THE SERVICE OF TRAVEL SECURITY. Presented By: Cristian Morosan - University of Houston

27 July 2017 Without prejudice TITLE [XX] DIGITAL TRADE

LAW OF THE REPUBLIC OF ARMENIA ON PROTECTION OF PERSONAL DATA CHAPTER 1 GENERAL PROVISIONS

COUNCIL OF THE EUROPEAN UNION. Brussels, 27 November 2009 (OR. en) 16110/09 JAI 838 USA 101 RELEX 1082 DATAPROTECT 73 ECOFIN 805

4/2/14. Who are you?? Introduction. Person Identification. How are people identified? People are identified by three basic means:

( ) Page: 1/5 WORK PROGRAMME ON ELECTRONIC COMMERCE ELECTRONIC SIGNATURES. Communication from Argentina, Brazil and Paraguay

GDPR in access control and time and attendance systems using biometric data

State Data Breach Laws

Spring Conference of the European Data Protection Authorities, Cyprus May 2007 DECLARATION

Having regard to the Treaty on the Functioning of the European Union, and in particular Article 16 thereof,

Identification Revolution: Can Digital ID Be Harnessed for Development?

Public Consultation on the Smart Borders Package

Visa Information System (VIS) FAQs

Act CXII of on the Right of Informational Self-Determination and on Freedom of Information 1 CHAPTER I GENERAL PROVISIONS. 1.

INTRODUCTION BACKGROUND. Chapter One

The Impact of Surveillance and Data Collection upon the Privacy of Citizens and their Relationship with the State

(1) Permission to take up self-employment or doing business.

Research Article. ISSN (Print)

New Data Protection Law Proposed in India! Flavors of GDPR

Online Voting System Using Aadhar Card and Biometric

vlk/kkj.k Hkkx II [k.m 1 izkf/kdkj ls izdkf'kr PUBLISHED BY AUTHORITY

Transcription:

Supreme Court Verdict on Aadhaar - I Why in news? The Supreme Court recently upheld the constitutionality of the Aadhaar in its majority verdict (4 out of 5 judges). Click here to know on the grounds for petitions filed against Aadhaar. What are the highlights of the majority verdict? The majority ruling called Aadhar a document of empowerment. The ruling has highlighted two main aspects of the unique identification project - 1. 2. Aadhaar as digital identity infrastructure Aadhaar's application as public infrastructure for various purposes

Right to privacy - Not all matters pertaining to an individual were an inherent part of the right to privacy. Only those matters in which there was a reasonable expectation of privacy were protected by Article 21 of the Constitution. In this context, the Aadhaar scheme passed the triple test laid down in the Puttaswamy (Privacy) judgment to check if it invades privacy viz. 1. existence of a law - backed by the statute i.e. the Aadhaar Act 2. a legitimate state interest - to ensure that social benefit schemes reach the deserving community 3. test of proportionality - balances the professed benefits of Aadhaar and the potential threat it carries to the fundamental right to privacy Money Bill - Section 7 of the Aadhaar Act mandates that individuals should produce Aadhaar to access social services, subsidy, benefits, etc. Moreover, it is clearly declared that expenditure incurred in this respect would be from the Consolidated Fund of India. Since Section 7 is the main provision of the Act, the validity of the Aadhaar Act being

passed as a Money Bill is upheld. Surveillance state - During the enrolment process, minimal biometric data in the form of iris and fingerprints is collected. Also, UIDAI does not collect purpose, location or details of the transaction. Hence the manner of operation of Aadhaar, "do not tend to create a surveillance state". Security of biometric data - UIDAI has mandated only registered devices to conduct biometric-based authentication transactions. With these registered devices, the biometric data is encrypted within the device using a key. This creates a unidirectional relationship between the host application and the UIDAI. This also rules out any possibility of the use of stored biometric, or the replay of biometrics captured from another source. Further, as per the regulations, authentication agencies are not allowed to store the biometrics captured for Aadhaar authentication. Telecoms - Aadhaar-based re-verification of mobile numbers has been held illegal and unconstitutional as it was not backed by any law. As a result- 1. telecom cannot insist on customers to furnish Aadhaar details 2. the provision that allowed private entities to conduct authentications has been held illegal. 3. corporate bodies including banks, mobile wallets, etc also cannot ask for customers' Aadhaar number.

PAN - Section 139AA of IT Act makes Aadhaar mandatory for filing IT returns and applying for PAN. Since it stood the triple test and did not violate the right to privacy, linking of PAN with Aadhaar will be mandatory. But there was no deadline mentioned by the court. It is also said that if in the regulations, a provision was made that impinged upon the right to privacy, it could be challenged. Linking of bank accounts - Linking of bank accounts and other financial instruments with Aadhaar were made mandatory by 2017 amendment to Prevention of Money Laundering Act Rules, 2005. It does not stand the proportionality test because just for preventing money laundering, there cannot be such a provision targeting every resident as a suspicious person, which is seen as

disproportionate. Therefore it violates the right to privacy of a person which extends to banking details and hence the amendment is declared unconstitutional. Details already given - The judgment does not clearly state if banks/mobile companies that have already collected Aadhar data will have to delete the collected information. But the court has upheld the validity of Section 59, which validates all Aadhaar enrolment done prior to the enactment of the Aadhaar Act, 2016. The court has said that since enrolment was voluntary, those who refuse to give consent would be allowed to exit. Aadhaar for education - Statutory bodies like CBSE and UGC cannot ask students to produce their Aadhaar cards for examinations like NEET and JEE. Aadhaar would also not be compulsory for school admissions as it is neither a service nor subsidy but a fundamental right for children between 6 and 14. Aadhaar for children - The consent of parents/guardians will be essential for the enrolment of children under the Aadhaar Act. On attaining the age of majority, such children shall have the option to exit. Section 33(1), Aadhaar Act - It prohibits disclosure of information (identity and authentication), except when it is by an order of a district judge or higher court. The judgment enabled individuals to have a right to challenge such an order passed by approaching the higher court. Section 33(2), Aadhaar Act - It provides for disclosure of information in the interest of national security when directed by an officer of Joint Secretary or higher rank. The court struck down this provision in the present form. It held that an officer higher than this rank should be given such a power and a Judicial Officer (preferably an HC judge) should also be associated with it. Section 47, Aadhaar Act - It provides for cognisance of offence only on complaint by UIDAI (or any person authorised by it). The court ruled that this needed suitable amendment to provide for filing of complaints also by an individual whose right was violated. Section 57, Aadhaar Act - It provides for use of Aadhaar number for establishing the identity of an individual for any purpose, by the state or any corporate or person.

The court has said that the section would impinge upon the right to privacy of the individual and enable commercial exploitation of biometric and demographic information. The court thus read down (providing narrow interpretation) this provision as susceptible to misuse. Regulation 26(c), Aadhaar Regulations - It allowed UIDAI to store metadata relating to transactions. The court struck down this regulation in its present form. Regulation 27 - It allowed archiving transaction data for 5 years. The court struck down this and allowed only upto 6 months. What are the highlights of the minority judgment? Justice D Y Chandrachud gave the dissenting minority judgment in which he observed the following. Surveillance - The architecture of Aadhaar poses a risk of potential surveillance activities through the Aadhaar database. From the verification log, it is possible to locate the places of transactions carried out by an individual over the past five years (now made six months). It was also possible to track an individual s location through the Aadhaar database, even without the verification log. Money Bill - Passing of a Bill as a Money Bill, when it does not qualify for it, damages the delicate balance of bicameralism. Notably, bicameralism is part of the basic structure of the Constitution. The ruling party in power may not command a majority in the Rajya Sabha. But the legislative role of that legislative body cannot be obviated and passing it as money bill was a fraud on the Constitution, Shortfalls - Denial of benefits arising out of any social security rights is violative of human dignity and impermissible under the constitutional scheme.

The biometric authentication failures under Aadhaar that have led to denial of rights and legal entitlements were highlighted in this regard. Click here for Part II Source: The Indian Express, The Hindu