Tue, Oct 12 02:53 AM
Can the UIDAI be used for religious profiling or to collect data about an individual's spending habits? What about identity theft?
According to UIDAI authorities, the structure of the database is such that you cannot query it; it is like a black box. So, you cannot ask it, for instance, to give you all the names ending with Jain along with their addresses. Nor can you ask it for all the names of individuals residing in an area with a particular pincode. Since all that the database has is a name, sex, age, address, fingerprints, photograph and an iris-scan, there is no question of having information about spending habits. Since the database has been developed to only answer a simple yes/no, the UIDAI authorities claim identity theft is not possible.
Sponsoring a 'Project GetMyIris', with a reward of say a million dollars to a person who can hack into the system, to get your biometrics including the iris details, wouldn't be a bad idea to set everyone's hearts at ease!
If it can't be queried, how does it work?
It can be queried to answer yes/no to items within the database. Once you get UIDAI'd, or Aadhar'd to use the project's brand name, you get a laminated, waterproof, tearproof paper that can last 20 years. (In case you forget your number, or lose the paper, you can, with your fingerprints, get a duplicate ID number.) So, let's say the income tax authorities start asking for UIDAI numbers while issuing PAN cards, and now want to check if the person with the UIDAI number ABCD1234 is Sunil Jain, it will get a yes/no answer. If you submit the fingerprint of a person and ask if this is Sunil Jain, you will get a yes/no. If you ask for a fingerprint of Sunil Jain, the database is not programmed to give it to you.
Can the programming be changed to allow for this in the future?
Theoretically it can, but UIDAI authorities say the plan is to keep it this way. In addition, there are various other checks to protect the database. But since the database does not keep information on incomes or credit card histories, the incentive to hack into it is low.
Is it possible to get a fake UIDAI number?
You can, but you can never ever get another UIDAI number under another name. So, if an individual X goes and gets a UIDAI number under the name Y, she can never apply for another UIDAI number. Say, she does. The system will automatically reject her saying there is already another person with the same biometrics in the system. That is, the incentive to game the system is zero. In case you wish to have your ID changed, say you no longer think having an Amitabh Bachchan ID is helping, you can get it changed after submitting your biometrics again. But no person can ever have more than one UIDAI number.
How do you get a UIDAI number?
Each state government appoints registrars and they, in turn, could appoint a UTI or a Wipro as an enrolment agency. Go to the enrolment agency and get yourself a number.
Do they ask for any proof of address?
Yes. There are 17 documents that can be used as proof of identity, ranging from a PAN card to photo IDs issued by recognised educational institutions. There are other documents that are to be used as proof of address.
What if you don't have an address? And will the UIDAI go and check if the person actually lives at the address given?
If you don't have proof of address, as in you're a migrant, there is the concept of introducers and they can vouch for you. This could be the Panchayat head, for instance. No check of the address will be done, but this is where your UIDAI number will be sent.
How do you find an introducer if you are a migrant worker?
UIDAI has just tied up with an alliance of 20+ NGOs that work with migrants. So the NGO will find a way to help. In the case of Delhi's homeless who were given UIDAI numbers, the homeless shelters they lived in were entered as the address. The design execution is kept flexible.
Can I be the introducer for my maid servant?
Not right now! Since there is no penalty for introducing the wrong person, the idea is to limit the introducers to certain types of officials the government trusts. In Andhra Pradesh, the government has appointed the NREGA department as the introducer. As a last resort, the UIDAI can also appoint introducers and get them registered with it. So, DLF can be registered as an introducer given the number of migrant labourers it works with, or even TeamLease given its status as the largest temping agency in the country. But that's in the future.
How will UIDAI work with ration cards and how will it certify the income of the person getting the card?
UIDAI cannot certify the income of a household. So, in case of Delhi, the government will get a survey done to identify the poor and to give them ration cards. If they have UIDAI numbers, these will be fed on to the card. If this will be a smart card, with my biometrics (collected by the Delhi government) or with my UIDAI number, each time I buy rations, my card will reflect this. Now let's say that one person tries to get three ration cards, as a brother in one, a father in another and a son in the third, the Delhi government's computer will be able to spot that one UIDAI number figures three times. But if there's a rich person who has a BPL card, the UIDAI can do nothing to detect this.
So how can that be done?
If the Delhi government wants, it can run its UIDAI numbers against those with the Income Tax Department or those with various property registries or some other database. If the numbers are common, the ration card can be rejected.
Does the UIDAI pay money to people who get numbers?
The 13th Finance Commission has allocated Rs 100 for each person in case a state has 100% coverage of BPL households. So if the state government wishes, it can make a payment.
Is UIDAI a substitute for KYC?
Not yet, but RBI is considering this. Last fortnight, RBI called a meeting with all banks where UIDAI authorities demonstrated how the UIDAI number could be used to make financial transactions in faraway villages. The UIDAI is discussing the possibility of using UIDAI for telcos as a substitute for the KYC required as per the rules.
Why should a poor person get a UIDAI number?
Today, any person getting government money, through NREGA or various health and other schemes, has to go to a designated office to check on whether the money has arrived. This could end up wasting precious days of working time and involve significant transport costs. If a person has a UIDAI number and uses this to open a Post Office account, the money can be electronically wired by the government. While sitting in the village, using the Banking Correspondent in her village, she can get to know if the money has arrived and then withdraw it. Zero transaction costs.
How do you let the poor know of these benefits?
UIDAI itself has a Rs 50 crore budget for advertising this year. There is no limit to the budgets the states have.
According to UIDAI authorities, the structure of the database is such that you cannot query it; it is like a black box. So, you cannot ask it, for instance, to give you all the names ending with Jain along with their addresses. Nor can you ask it for all the names of individuals residing in an area with a particular pincode. Since all that the database has is a name, sex, age, address, fingerprints, photograph and an iris-scan, there is no question of having information about spending habits. Since the database has been developed to only answer a simple yes/no, the UIDAI authorities claim identity theft is not possible.
Sponsoring a 'Project GetMyIris', with a reward of say a million dollars to a person who can hack into the system, to get your biometrics including the iris details, wouldn't be a bad idea to set everyone's hearts at ease!
If it can't be queried, how does it work?
It can be queried to answer yes/no to items within the database. Once you get UIDAI'd, or Aadhar'd to use the project's brand name, you get a laminated, waterproof, tearproof paper that can last 20 years. (In case you forget your number, or lose the paper, you can, with your fingerprints, get a duplicate ID number.) So, let's say the income tax authorities start asking for UIDAI numbers while issuing PAN cards, and now want to check if the person with the UIDAI number ABCD1234 is Sunil Jain, it will get a yes/no answer. If you submit the fingerprint of a person and ask if this is Sunil Jain, you will get a yes/no. If you ask for a fingerprint of Sunil Jain, the database is not programmed to give it to you.
Can the programming be changed to allow for this in the future?
Theoretically it can, but UIDAI authorities say the plan is to keep it this way. In addition, there are various other checks to protect the database. But since the database does not keep information on incomes or credit card histories, the incentive to hack into it is low.
Is it possible to get a fake UIDAI number?
You can, but you can never ever get another UIDAI number under another name. So, if an individual X goes and gets a UIDAI number under the name Y, she can never apply for another UIDAI number. Say, she does. The system will automatically reject her saying there is already another person with the same biometrics in the system. That is, the incentive to game the system is zero. In case you wish to have your ID changed, say you no longer think having an Amitabh Bachchan ID is helping, you can get it changed after submitting your biometrics again. But no person can ever have more than one UIDAI number.
How do you get a UIDAI number?
Each state government appoints registrars and they, in turn, could appoint a UTI or a Wipro as an enrolment agency. Go to the enrolment agency and get yourself a number.
Do they ask for any proof of address?
Yes. There are 17 documents that can be used as proof of identity, ranging from a PAN card to photo IDs issued by recognised educational institutions. There are other documents that are to be used as proof of address.
What if you don't have an address? And will the UIDAI go and check if the person actually lives at the address given?
If you don't have proof of address, as in you're a migrant, there is the concept of introducers and they can vouch for you. This could be the Panchayat head, for instance. No check of the address will be done, but this is where your UIDAI number will be sent.
How do you find an introducer if you are a migrant worker?
UIDAI has just tied up with an alliance of 20+ NGOs that work with migrants. So the NGO will find a way to help. In the case of Delhi's homeless who were given UIDAI numbers, the homeless shelters they lived in were entered as the address. The design execution is kept flexible.
Can I be the introducer for my maid servant?
Not right now! Since there is no penalty for introducing the wrong person, the idea is to limit the introducers to certain types of officials the government trusts. In Andhra Pradesh, the government has appointed the NREGA department as the introducer. As a last resort, the UIDAI can also appoint introducers and get them registered with it. So, DLF can be registered as an introducer given the number of migrant labourers it works with, or even TeamLease given its status as the largest temping agency in the country. But that's in the future.
How will UIDAI work with ration cards and how will it certify the income of the person getting the card?
UIDAI cannot certify the income of a household. So, in case of Delhi, the government will get a survey done to identify the poor and to give them ration cards. If they have UIDAI numbers, these will be fed on to the card. If this will be a smart card, with my biometrics (collected by the Delhi government) or with my UIDAI number, each time I buy rations, my card will reflect this. Now let's say that one person tries to get three ration cards, as a brother in one, a father in another and a son in the third, the Delhi government's computer will be able to spot that one UIDAI number figures three times. But if there's a rich person who has a BPL card, the UIDAI can do nothing to detect this.
So how can that be done?
If the Delhi government wants, it can run its UIDAI numbers against those with the Income Tax Department or those with various property registries or some other database. If the numbers are common, the ration card can be rejected.
Does the UIDAI pay money to people who get numbers?
The 13th Finance Commission has allocated Rs 100 for each person in case a state has 100% coverage of BPL households. So if the state government wishes, it can make a payment.
Is UIDAI a substitute for KYC?
Not yet, but RBI is considering this. Last fortnight, RBI called a meeting with all banks where UIDAI authorities demonstrated how the UIDAI number could be used to make financial transactions in faraway villages. The UIDAI is discussing the possibility of using UIDAI for telcos as a substitute for the KYC required as per the rules.
Why should a poor person get a UIDAI number?
Today, any person getting government money, through NREGA or various health and other schemes, has to go to a designated office to check on whether the money has arrived. This could end up wasting precious days of working time and involve significant transport costs. If a person has a UIDAI number and uses this to open a Post Office account, the money can be electronically wired by the government. While sitting in the village, using the Banking Correspondent in her village, she can get to know if the money has arrived and then withdraw it. Zero transaction costs.
How do you let the poor know of these benefits?
UIDAI itself has a Rs 50 crore budget for advertising this year. There is no limit to the budgets the states have.
