The UIDAI has taken two successive governments in India and the entire world for a ride. It identifies nothing. It is not unique. The entire UID data has never been verified and audited. The UID cannot be used for governance, financial databases or anything. It’s use is the biggest threat to national security since independence. – Anupam Saraph 2018

When I opposed Aadhaar in 2010 , I was called a BJP stooge. In 2016 I am still opposing Aadhaar for the same reasons and I am told I am a Congress die hard. No one wants to see why I oppose Aadhaar as it is too difficult. Plus Aadhaar is FREE so why not get one ? Ram Krishnaswamy

First they ignore you, then they laugh at you, then they fight you, then you win.-Mahatma Gandhi

In matters of conscience, the law of the majority has no place.Mahatma Gandhi

“The invasion of privacy is of no consequence because privacy is not a fundamental right and has no meaning under Article 21. The right to privacy is not a guaranteed under the constitution, because privacy is not a fundamental right.” Article 21 of the Indian constitution refers to the right to life and liberty -Attorney General Mukul Rohatgi

“There is merit in the complaints. You are unwittingly allowing snooping, harassment and commercial exploitation. The information about an individual obtained by the UIDAI while issuing an Aadhaar card shall not be used for any other purpose, save as above, except as may be directed by a court for the purpose of criminal investigation.”-A three judge bench headed by Justice J Chelameswar said in an interim order.

Legal scholarUsha Ramanathandescribes UID as an inverse of sunshine laws like the Right to Information. While the RTI makes the state transparent to the citizen, the UID does the inverse: it makes the citizen transparent to the state, she says.

Good idea gone bad
I have written earlier that UID/Aadhaar was a poorly designed, unreliable and expensive solution to the really good idea of providing national identification for over a billion Indians. My petition contends that UID in its current form violates the right to privacy of a citizen, guaranteed under Article 21 of the Constitution. This is because sensitive biometric and demographic information of citizens are with enrolment agencies, registrars and sub-registrars who have no legal liability for any misuse of this data. This petition has opened up the larger discussion on privacy rights for Indians. The current Article 21 interpretation by the Supreme Court was done decades ago, before the advent of internet and today’s technology and all the new privacy challenges that have arisen as a consequence.Rajeev Chandrasekhar, MP Rajya Sabha

“What is Aadhaar? There is enormous confusion. That Aadhaar will identify people who are entitled for subsidy. No. Aadhaar doesn’t determine who is eligible and who isn’t,” Jairam Ramesh

But Aadhaar has been mythologised during the previous government by its creators into some technology super force that will transform governance in a miraculous manner. I even read an article recently that compared Aadhaar to some revolution and quoted a 1930s historian, Will Durant.Rajeev Chandrasekhar, Rajya Sabha MP

“I know you will say that it is not mandatory. But, it is compulsorily mandatorily voluntary,” Jairam Ramesh, Rajya Saba April 2017.

August 24, 2017: The nine-judge Constitution Bench rules that right to privacy is “intrinsic to life and liberty”and is inherently protected under the various fundamental freedoms enshrined under Part III of the Indian Constitution

"Never doubt that a small group of thoughtful, committed citizens can change the World; indeed it's the only thing that ever has"

“Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say.” -Edward Snowden

In the Supreme Court, Meenakshi Arora, one of the senior counsel in the case, compared it to living under a general, perpetual, nation-wide criminal warrant.

Had never thought of it that way, but living in the Aadhaar universe is like living in a prison. All of us are treated like criminals with barely any rights or recourse and gatekeepers have absolute power on you and your life.

Announcing the launch of the#BreakAadhaarChainscampaign, culminating with events in multiple cities on 12th Jan. This is the last opportunity to make your voice heard before the Supreme Court hearings start on 17th Jan 2018. In collaboration with @no2uidand@rozi_roti.

UIDAI's security seems to be founded on four time tested pillars of security idiocy

1) Denial

2) Issue fiats and point finger

3) Shoot messenger

4) Bury head in sand.

God Save India

Friday, April 27, 2018

13369 - Aadhaar hearing: The Act is a well balanced law of which a few provisions should be struck down, argues advocate Gopal Sankaranarayanan - First Post

India Asheeta Regidi Apr 27, 2018 12:38 PM IST

On Day 34 of the Aadhaar hearings, advocate Gopal Sankaranarayanan continued his arguments for the Centre for Civil Society, an intervenor in the Aadhaar case. He argued that the Aadhaar Act was a valid and balanced law with sufficient safeguards. The exception to this was of a few provisions like Sections 47 and 57 which need to be struck down. He argued that the mandatory use of Aadhaar for anything other than Section 7 is manifestly arbitrary.

Senior counsel Neeraj Kishan Kaul on behalf of the Digital Lenders Association of India and others also argued that the private sector should be allowed to use Aadhaar.

Lastly, counsel Zoheb Hossain argued that Aadhaar enabled the enforcing of social and economic rights.

Aadhaar provides one kind of identification
In the previous hearing, Sankaranarayanan had argued that the Aadhaar Act is a valid law, subject to certain provisions which need to be struck down. The right to identity, he had argued, is an absolute fundamental right, and Aadhaar provides one kind of proof of identification. The Bench now stated that a person does have multiple identities, be it as a father, husband, of citizenship, etc. Aadhaar, however, does not destroy those identities. The counsel, here, described Aadhaar as a number identifying a person as a beneficiary of a particular subsidy, benefit or service.

Aadhaar passes all tests for privacy
He argued that he was in support of the Aadhaar Act because of the safeguards and pillars on which it stands, but Section 139AA of the Income Tax Act (Aadhaar PAN linking) takes away those. He argued that there was no mass surveillance through Aadhaar. The privacy concerns with Aadhaar, he argued, were valid, but the Aadhaar Act passes all the tests for privacy and constitutionality that are laid down.

Aadhaar number is purely voluntary
The Aadhaar Act, he argued, makes the Aadhaar number purely an entitlement and not mandatory. The Bench, here, pointed out that Aadhaar was mandatory for Section 7 benefits. The counsel further argued that Section 4 of the Aadhaar Act states that the Aadhaar number can be accepted as a proof of identity, and is not restricted to the purposes of the Aadhaar Act. Section 57, therefore, which allows private parties and others to use Aadhaar, is not necessary.

Beneficial provisions of Aadhaar
Next, he argued that Section 5 requires the UIDAI to take special measures towards the vulnerable groups such as senior citizens, unskilled workers, etc., and thus indicates a discharge of obligation by the State. Section 7, he argued, is also a beneficial provision. He argued that the even if someone doesn’t have Aadhaar, the State has an obligation to identify the person, which has led to Section 7 being worded the way it has been (the provision of alternatives to Aadhaar numbers). Recognition of the identity of every person, he argued, is an international obligation. He went on to cite several European and US judgments on the issue of the right to identity.

Section 7 is reasonable
The Bench, here, asked the counsel to deal with the petitioner’s contention on Aadhaar as the only identification mechanism for Section 7 benefits and is thus mandatory. To this, the counsel responded that the answer was in Article 266(3) of the Constitution of India, which states that no funds from the Consolidated Funds can be appropriated except in accordance with the law. The State, he argued, has the onerous obligation of securing public funds, which is why Section 7 is reasonable.

Absolute foolproof identity claim is questionable
Next, he argued on the issue of Aadhaar being made into a universal identification, and all other identity documents that were used to get Aadhaar were rendered irrelevant. He argued that allowing 18 proofs of identity, and making Aadhaar available for all residents makes the absolutely foolproof identity claim doubtful. Aadhaar, he argued, was only as secure as the proofs of identity provided. These factors, he stated, must be kept in mind while deciding on the issue of proportionality.

Aadhaar Act can remain balanced only if uses for all purposes other than Section 7 remains voluntary.

Use of Aadhaar for anything other than Section 7 is arbitrary
The Aadhaar Act, he argued, has a balance because of the limited use under Section 7. Section 139AA, on the other hand, lacks this balance. He argued that mandatory use of Aadhaar for anything other than Section 7 was manifestly arbitrary. The Aadhaar Act can remain balanced only if uses for all purposes other than Section 7 remains voluntary. He further argued that while the Aadhaar Act was in furtherance of the Directive Principles of State Policy, Section 139AA was not.

Only the UIDAI can approach Courts
Next, he turned to the issue of proportionality, arguing that for this, the test of the least restrictive invasion does not apply, and instead the test of whether there was balance was to be applied. The Aadhaar Act, he argued, had sufficient safeguards and prescription of offences for this balance. He, however, challenged Section 47, which gives only the UIDAI the power to approach courts with grievances, as being against natural justice. He further stated that having embedded or smart cards instead of the centralised CIDR would be less secure since people could misplace their cards.

Authorities showing hubris on security levels
Next, he argued that the authorities were showing hubris with respect to their security levels. This, he argued, was questionable, citing the example of encryption levels, the 2048 bit asymmetric keys, as not the best available. There were huge holes in terms of security, exclusion and authentication failures, which needed to be plugged before everyone was made to use it.

Informed consent for uses outside Aadhaar Act
Next, he turned to the issue of informed consent, arguing that the safeguards under the Aadhaar Act were in addition to those under Section 43A of the IT Act and the IT Sensitive Personal Data Rules. The application of these rules, he argued, implied that there must be informed consent whenever Aadhaar was used outside of the Aadhaar Act, and also an opt-out.

‘Any appropriate’ response to the authentication request
He then challenged Section 8(4) of the Aadhaar Act, which allows the UIDAI to respond with ‘any other appropriate response sharing such identity information’, in response to an authentication request. This, he argued, is a privacy violation, which could not be counter-balanced with a state interest. A person’s address, for instance, may be private data.

Aadhaar violates Right to Information Act
Lastly, he argued that Section 29(2) of the Aadhaar Act, which states that identity information must be shared only in accordance with the Aadhaar Act and regulations, ignores the compulsory mandate of Section 4(b)(xii) of the Right to Information Act, which requires public authorities to publish details of the manner of execution of subsidy programs.

The private sector should be allowed to use Aadhaar
Next, senior counsel Neeraj Kishan Kaul commenced his arguments on behalf of the Digital Lender’s Association of India, and other associations who have built their businesses around Aadhaar. He argued that the free flow of information is necessary, citing the example of how banking correspondents empowered the poor, women and also migrant labour. When questioned by the Bench on Section 57 of the Aadhaar Act, he stated that Section 57 should be voluntary, and based on consensus. Aadhaar, for instance, was essential for microfinance via kirana shops and banking correspondents.

The Bench, here, questioned why there was a need for Aadhaar based central authentication. To this, he argued that Aadhaar was a powerful tool and an effective and a cost-effective method which already exists, and therefore the private sector should be able to use it. The information that can be collected via Aadhaar, he argued, is collectible even without Aadhaar.
The real issue was unauthorised sharing, which is a problem even outside of Aadhaar, and thus these aren’t grounds to strike down Section 57.

Virtual ID, he argued, was still better, since there could be no storage of Aadhaar numbers. The speculative possibility of identity theft, he argued, will not defeat the statute. Further, location of the AuAs and KuAs is never shared, so there is no question of surveillance.

Aadhaar enables enforcing social and economic rights
Next, counsel Zoheb Hossain commenced his submissions for the UIDAI, arguing that social and economic rights were enforceable rights. The positive obligations on the State, such as with respect to food, shelter, etc., were enshrined in Article 21 of the Constitution. He argued that Aadhaar is an infrastructure that helps progressively achieve these positive duties of the State under Article 21.

The arguments will continue on 2 May.

Sources of the arguments include LiveTweeting of the case by SFLC.in and Prasanna S.

You can read our complete coverage of the Aadhaar Supreme Court case below

The author is a lawyer and author specializing in technology laws. She is also a certified information privacy professional.