What harm can you do to me if you have my Aadhaar details, asks Trai chairman R.S. Sharma

Women line up at an Aadhar camp | Getty Images
Women line up at an Aadhaar camp | Getty Images

As the debate intensifies before the Supreme Court judgment, the outgoing Trai chairman says Aadhaar doesn’t violate privacy.

New Delhi: Telecom Regulatory Authority of India (Trai) chairman R.S. Sharma – widely tipped to be the head of the new data protection authority – has said that Aadhaar does not violate privacy and the government has a right to create such a database of residents since it gives subsidies.

“Tell me what harm can you do to me if you have my Aadhaar details? I will give you my Aadhaar number if you like,” Sharma, whose tenure ends on 9 August, told ThePrint in an interview.

Sharma is being talked of as a leading contender to head the new data protection authority mentioned in a Trai paper on data protection and privacy released last week. In its recommendations, Trai favoured greater control for users on their data.

A former IAS officer who was picked as the first director-general of the Unique Identification Authority of India or UIDAI in 2009 to issue Aadhaar numbers, Sharma also strongly defended the creation of a database of residents by the government.

The move to create, access and link this database has sparked privacy violation concerns among some activists and campaigners. More than two dozen petitions were filed in the Supreme Court challenging the constitutional validity of Aadhaar and the verdict was reserved after hearings concluded in May.

The central government is also waiting for the Justice B.N. Srikrishna Committee to submit its draft data protection law which aims to address the privacy violation fears.

“The government has every right to do this,” Sharma said, referring to the creation of the Aadhaar database. “If the government is giving subsidies then it must know if it’s going to the right person and that no person is claiming it twice.”

He also rejected the interpretation of some recent reports which said the Employees Provident Fund Organisation members faced the risk of their identities being stolen after the EPFO’s Aadhaar seeding portal was hacked.

“If someone breaks into your house and steals your cash, and if that cash has the code of RBI, then is that RBI property that was stolen or your money? Similarly, if the EPFO site was hacked then it was EPFO data that was leaked, not Aadhaar data.”

“Even if a bank account is linked to Aadhaar, UIDAI does not get your bank details and only serves to authenticate identity,” he said.

Sharma also rejected talk of 1 billion Aadhaar accounts being vulnerable. He said there had not been a single instance of data being breached and had there been one, the entire Aadhaar database would have been vulnerable.

Aadhaar and IndiaStack, a computer application programming interface that allows governments, businesses, start-ups and developers to utilise digital infrastructure, are the kinds of innovation seen in no other country, said Sharma.

“We’ll see what the (Supreme Court) judgment is – it should come any day,” he said.

Editor’s Note: This report has been updated to accurately reflect the comment that Aadhaar is a database of residents and not a profile of citizens, after it was pointed out by R.S. Sharma. The error is regretted.