In 2009, I became extremely concerned with the concept of Unique Identity for various reasons. Connected with many like minded highly educated people who were all concerned.
On 18th May 2010, I started this Blog to capture anything and everything I came across on the topic. This blog with its million hits is a testament to my concerns about loss of privacy and fear of the ID being misused and possible Criminal activities it could lead to.
In 2017 the Supreme Court of India gave its verdict after one of the longest hearings on any issue. I did my bit and appealed to the Supreme Court Judges too through an On Line Petition.
In 2019 the Aadhaar Legislation has been revised and passed by the two houses of the Parliament of India making it Legal. I am no Legal Eagle so my Opinion carries no weight except with people opposed to the very concept.
In 2019, this Blog now just captures on a Daily Basis list of Articles Published on anything to do with Aadhaar as obtained from Daily Google Searches and nothing more. Cannot burn the midnight candle any longer.
"In Matters of Conscience, the Law of Majority has no place"- Mahatma Gandhi
Ram Krishnaswamy
Sydney, Australia.

Aadhaar

The UIDAI has taken two successive governments in India and the entire world for a ride. It identifies nothing. It is not unique. The entire UID data has never been verified and audited. The UID cannot be used for governance, financial databases or anything. It’s use is the biggest threat to national security since independence. – Anupam Saraph 2018

When I opposed Aadhaar in 2010 , I was called a BJP stooge. In 2016 I am still opposing Aadhaar for the same reasons and I am told I am a Congress die hard. No one wants to see why I oppose Aadhaar as it is too difficult. Plus Aadhaar is FREE so why not get one ? Ram Krishnaswamy

First they ignore you, then they laugh at you, then they fight you, then you win.-Mahatma Gandhi

In matters of conscience, the law of the majority has no place.Mahatma Gandhi

“The invasion of privacy is of no consequence because privacy is not a fundamental right and has no meaning under Article 21. The right to privacy is not a guaranteed under the constitution, because privacy is not a fundamental right.” Article 21 of the Indian constitution refers to the right to life and liberty -Attorney General Mukul Rohatgi

“There is merit in the complaints. You are unwittingly allowing snooping, harassment and commercial exploitation. The information about an individual obtained by the UIDAI while issuing an Aadhaar card shall not be used for any other purpose, save as above, except as may be directed by a court for the purpose of criminal investigation.”-A three judge bench headed by Justice J Chelameswar said in an interim order.

Legal scholar Usha Ramanathan describes UID as an inverse of sunshine laws like the Right to Information. While the RTI makes the state transparent to the citizen, the UID does the inverse: it makes the citizen transparent to the state, she says.

Good idea gone bad
I have written earlier that UID/Aadhaar was a poorly designed, unreliable and expensive solution to the really good idea of providing national identification for over a billion Indians. My petition contends that UID in its current form violates the right to privacy of a citizen, guaranteed under Article 21 of the Constitution. This is because sensitive biometric and demographic information of citizens are with enrolment agencies, registrars and sub-registrars who have no legal liability for any misuse of this data. This petition has opened up the larger discussion on privacy rights for Indians. The current Article 21 interpretation by the Supreme Court was done decades ago, before the advent of internet and today’s technology and all the new privacy challenges that have arisen as a consequence.

Rajeev Chandrasekhar, MP Rajya Sabha

“What is Aadhaar? There is enormous confusion. That Aadhaar will identify people who are entitled for subsidy. No. Aadhaar doesn’t determine who is eligible and who isn’t,” Jairam Ramesh

But Aadhaar has been mythologised during the previous government by its creators into some technology super force that will transform governance in a miraculous manner. I even read an article recently that compared Aadhaar to some revolution and quoted a 1930s historian, Will Durant.Rajeev Chandrasekhar, Rajya Sabha MP

“I know you will say that it is not mandatory. But, it is compulsorily mandatorily voluntary,” Jairam Ramesh, Rajya Saba April 2017.

August 24, 2017: The nine-judge Constitution Bench rules that right to privacy is “intrinsic to life and liberty”and is inherently protected under the various fundamental freedoms enshrined under Part III of the Indian Constitution

"Never doubt that a small group of thoughtful, committed citizens can change the World; indeed it's the only thing that ever has"

“Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say.” -Edward Snowden

In the Supreme Court, Meenakshi Arora, one of the senior counsel in the case, compared it to living under a general, perpetual, nation-wide criminal warrant.

Had never thought of it that way, but living in the Aadhaar universe is like living in a prison. All of us are treated like criminals with barely any rights or recourse and gatekeepers have absolute power on you and your life.

Announcing the launch of the # BreakAadhaarChainscampaign, culminating with events in multiple cities on 12th Jan. This is the last opportunity to make your voice heard before the Supreme Court hearings start on 17th Jan 2018. In collaboration with @no2uidand@rozi_roti.

UIDAI's security seems to be founded on four time tested pillars of security idiocy

1) Denial

2) Issue fiats and point finger

3) Shoot messenger

4) Bury head in sand.

God Save India

Showing posts with label Airtel. Show all posts
Showing posts with label Airtel. Show all posts

Sunday, January 14, 2018

12745 - Telecoms hold customers to ransom for Aadhaar info -Deccan Chronicle

DECCAN CHRONICLE. | COREENA SUARES

Published
Jan 13, 2018, 1:24 am IST


Hyderabad: Airtel customers alleged that the telecom major is blocking SIM cards randomly and is asking for Aadhaar details to activate the same. Other telecom players like Vodafone and Idea are facing similar allegations from customers. 

Customers voiced concern on social media, and said that the service provider was blocking SIMs which were not linked to Aadhaar. In many cases, Airtel asked for the Aadhaar number to replace even faulty SIM cards.  

The Delhi-based Bharti Airtel national communication team denied deactivation of SIMs due to Aadhaar linkage. They,  however, blamed it on technical snags. 

Ms. Sangeeth Arvind Kumar, whose SIM was deactivated, said, “My SIM was blocked and when I visited the help desk at Patny Circle, I found seven more customers with the same grievance. I submitted my Aadhaar details and it was unlocked on the same day.”

Mr. Akshay Goud from Bansilalpet also went through a similar ordeal. He said, “My SIM abruptly stopped working.  The helpline staff said that it needed my Aadhaar number to activate it.”   Mr Anant Desai, a banker from Ameerpet,  added, “Even SIM replacement and a new SIM, Airtel is insisting on Aadhaar.” Many took to social media, tagging Airtel officials.   

In a statement to Deccan Chronicle, the communication team of Bharti Airtel, said, “While we have also come across such tweets, there is no such thing and there is no truth in these allegations. We do not block any SIM and neither do we force customers to link their Aadhaar. It is really disappointing to see some people using social media to malign brands. It only adds to the confusion among other customers.”

Asutosh J. G, Bengaluru
This happened with me 2 weeks ago. They said they would issue a replacement SIM for faulty one after four days since I don’t have a Aadhaar card (sic). Only after several calls and mails, they reinstated the connection.

C A Rajani Damani, Guwahati, Assam 
I have also experience this, the help center didn’t replace my sim on basis of other ID proof such a passport /pan card, they demanded Aadhaar (sic). 

Edwin Rajan, Chennai 
Yes true, My friend’s Airtel sim got disconnected when asked airtel connect showroom they are asking to link Aadhaar and buy a new sim (sic). 

Ibrahim S, Bengaluru
My Sim was blocked for 3 months before. Went to Airtel store to get it replaced. Upon replacement I refused them my aadhaar details and was told activation is instant for aadhaar and not for other proofs (sic). 

Bilal Motorwala, Mumbai
They tried to do the same thing with me, when I asked for government notification and any court order making it mandatory, the staff baffled and back tracked (sic).
Note: To all the complaints that tagged Airtel’s official handle, there has been a standard response stating, “We have not blocked any SIM due to this, kindly note, Aadhaar-based authentication is a faster SIM replacement process compared to normal paper document based process, hence we recommend Aadhaar-based SIM replacement. 


Thursday, January 4, 2018

121614 - The Airtel-Aadhaar fix - Front Line

Print edition : January 19, 2018

ECONOMIC PERSPECTIVES


Airtel is let off lightly by the government despite being in clear violation of the law in a case that exposes the flaws and dangers in the ecosystem surrounding Aadhaar.

DESPITE its clear violation of the law, telecom major Airtel appears to have been let off lightly by the government. And that story, though reported, has neither led to adequate punishment nor has it received the extent of media attention it deserves. The story is that Airtel used its position as a dominant mobile services provider to strengthen its new role as a “payments bank” by exploiting a loophole in a system created through the decisions of multiple agencies. The company not only opened a large number of payments bank accounts in the names of its mobile subscribers without their knowledge, it also transferred direct benefit payments due to them under the LPG subsidy scheme to these new accounts as against those previously specified by them. The scale of the scam is large given the relatively short period for which it could have been operative. The cooking gas subsidy due to 4.7 million customers totalling around Rs.167 crore was reportedly diverted to Airtel Payments Bank accounts over a period of two months.

Once the Unique Identification Authority of India (UIDAI) detected the malpractice, it sought to conceal its own culpability by (i) declaring it a violation of the Aadhaar Act, 2016; (ii) requiring Airtel to deposit an interim penalty of Rs.2.5 crore with the UIDAI; (iii) obtaining an assurance that the bank will immediately return Rs.190 crore that had been transferred to unsolicited accounts out of the LPG subsidy due to its mobile clients; and by (iv) announcing that Airtel and its payments bank will not be able to use the UIDAI’s Aadhaar-linking system to either verify mobile subscriptions or open new bank accounts.

However, the last of these penalties has proved temporary and extremely short-term. Under the current dispensation, the abrogation of the right to verify mobile subscriptions was perhaps the only penalty of significance imposed on Airtel because all unverified subscribers would have to be disconnected from the Airtel network by February 6. That would have been a significant setback for Airtel in the current competitive mobile telephony market. But it would also have put the government’s push to make Aadhaar-linking mandatory for all mobile subscriptions in jeopardy. So, within a few days the UIDAI decided to allow Bharti Airtel Ltd to resume Aadhaar-based electronic know-your-client (e-KYC) verification of telecom subscribers until January 10.

There was wrongdoing implicit in Airtel’s act of creating unsolicited bank accounts and transferring to them subsidies due to the clients. While opening an Airtel account is free, there is an implicit charge as the account cannot be closed without paying a “set off balance” of Rs.50. Moreover, once funds are deposited with Airtel Payments Bank, withdrawals are subject to a charge. Airtel’s clients did not know that they would have to pay to access their own money, just as many had no knowledge of the accounts opened in their name.

After it was discovered to be in violation of the law, Airtel returned the money it had “virtually stolen”, paid a small penalty and expressed its contrition by finding a fall guy. Airtel Payments Bank’s chief executive, Shashi Arora, resigned, although the company attributed that to a personal decision, unrelated to the scam. What is surprising is that the mainstream media, which would have sensationalised any scam of this magnitude, chose to give it limited coverage, as if it were news that was marginal. No strident opinion here, expressing the voice of the nation.

There are at least four possible reasons for the government being so lenient and for the mainstream media almost ignoring the issue (despite some exceptional coverage by online news portals). First, the scam reveals weaknesses and dangers in the government’s Aadhaar or unique identity number programme, which the government has pursued with missionary zeal, although the scheme has been challenged in court.
Second, the incident makes it clear that the scam was facilitated by an initiative of the government to force-link mobile phone connections and Aadhaar card numbers.
Third, the scam involved the manner of implementation of two other of the government’s pet programmes—the direct benefit transfers scheme for reaching subsidies to beneficiaries and the push towards greater digital financial transactions through a number of routes, in this case, the use of payments banks.
Finally, news of the discovery was perhaps partly suppressed since it involved a major corporate such as Airtel.

Disturbing details
The details of the “scam” are disturbing. Airtel is licensed to launch a payments bank, which it did on January 13, 2017. “Payments banks” are allowed to accept deposits of up to Rs.100,000 but cannot provide loans. Further, 75 per cent of the deposits accruing to these banks have to be invested in low-yielding but safe government securities. This means that while these banks compete with commercial banks to mobilise deposits and have to pay high interest rates to attract deposits, a large share of their funds would be locked in low-yielding government securities. Airtel chose to go aggressive and offered depositors an interest rate of 7.25 per cent, much higher than the 4 per cent offered by Paytm Payments Bank and the 3.5 to 6 per cent offered by commercial banks.

Since payments banks cannot lend, their revenues to cover costs and generate profits have to be based substantially on incomes from fees derived from deposit holders. This makes payments banks uncompetitive, so much so that only a few of the original 11 licensees have chosen to pursue the business. Airtel set high fees to partly cover its high interest rate offer to depositors. Withdrawals from an Airtel account exceeding Rs.100 are charged a fee that rises with the size of the withdrawal, and touches 0.65 per cent for transactions above Rs.4,000. Transfers of more than Rs.1,000 from Airtel Payments Bank to any other bank are charged 0.5 per cent of the amount involved. The strategy possibly was to attract depositors, impose high fees and then move interest rates downwards, to extract a profit.

The interest would have been initially paid out from new deposits in a Ponzi-like scheme. But once depositors became aware that they would be charged for all payments excepting those that were extremely small or were transacted within Airtel Payments Bank, they were unlikely to bank with the mobile operator. Clearly, Airtel’s high interest offer to depositors was not sustainable in the long run. To address this problem, Airtel worked out a scheme to generate deposits without the knowledge of the depositors themselves. This it did by exploiting the government’s decision based on a Supreme Court order in Lokniti Foundation vs Union of India, that for “security” reasons the government must put in place a scheme to verify holders of all mobile subscriptions within a year of February 6, 2017. Since the government’s plea was that this was being done by using biometric information attached to Aadhaar numbers for new and renewing prepaid subscribers, it interpreted the Supreme Court’s order as amounting to making e-KYC verification based on the Aadhaar database mandatory for holding a mobile phone subscription after February 6, 2018. Since subscribers were being constantly warned of the prospect of disconnection, despite a case in the Supreme Court questioning the government’s claim that Aadhaar linking of mobile numbers was mandatory, a rush to do this followed. Linking requires subscribers to validate their biometric information at the mobile service provider’s premises by connecting to the UIDAI database.

One possibility is that Airtel chose to collect biometric information more than once from its subscribers (by claiming failure to validate). Only one of those instances of collection was used to link mobile and Aadhaar numbers. The other was used to create the Airtel Payments Bank account, link it to the Aadhaar number of the client and in the process override earlier preferences of the bank account to which direct benefit transfers were mandated. The result was a large inflow of deposits to those accounts without the consent of the deposit-holders, who, in most cases, did not even know that the accounts existed.
This occurred not only because Airtel chose to misuse the system but also because the ecosystem surrounding Aadhaar and its use as a surveillance device in multiple circumstances is deeply flawed. An analysis by Anand Venkatanarayanan and Srikanth Lakshmanan in the news portal, The Wire, argues that Airtel was aided by the acts of commission or omission of three other players: the Central government, “which pushed ahead with its direct benefit transfer scheme and mandated the Aadhaar-based re-verification of mobile phone subscribers”; the National Payments Corporation of India, which handles digital payments and settlement systems; and the UIDAI, which created the e-KYC framework.
It is because of this joint responsibility, which shows up Aadhaar to be a deeply flawed project, that Airtel has been able to get off lightly. But that is in keeping with the special rules that the behemoths created by neoliberal, market-friendly policies enjoy the world over. In fact, the Airtel scam is similar to what Wells Fargo was charged with in the United States a little more than a year ago.
The Financial Sector Protection Bureau (FSPB) of the U.S. discovered that more than 5,000 employees of the bank had, over five years, opened more than a million new banking accounts and half a million or so credit card accounts in the names of its customers without their knowledge, in order to meet sales targets. The customers were charged a fee before the accounts were closed. Thus, through fraudulent “cross-selling”—the selling of new products to existing customers—and fake outcomes, employees met their targets and enhanced their incomes.
The fraud was either missed or ignored by senior management for a very long time. But even there the settlement for ending the investigation into these violations required Wells Fargo to pay a fine of only $185 million, and set aside $5 million to compensate clients who were charged fees on accounts they had no knowledge of. Relative to the net profits of more than $20 billion that Wells Fargo was expected to record in 2016, the fine was not really much damage. On the other hand, more than 5,000 employees lost their jobs on charges of fraud, while senior management went scot-free.

Tuesday, December 26, 2017

12553 - Airtel Payments Bank CEO steps down in wake of Aadhaar e-KYC misuse - The News Minute

The company is yet to name Shashi Arora's successor.
  • IANS
    Friday, December 22, 2017 - 22:12 
Shashi Arora, CEO and Managing Director of Airtel Payments Bank, has stepped down, the company announced on Friday - nearly a week after the Unique Identification Authority of India, (UIDAI) suspended its Aadhaar linked e-KYC services because of alleged misuse.

"Shashi Arora has been associated with Airtel in senior leadership roles since 2006. He has been an asset for Airtel and over the years has contributed to the company's growth story," Airtel said in a statement here on Friday, without mentioning the suspension. Airtel's e-KYC facility was partly restored by UIDAI on Thursday.

"Having led the operations in key telecom circles followed by building a strong DTH (direct-to-home) business, he has laid the foundation for Airtel's Payments Bank operations. Shashi has decided to move on to pursue opportunities outside of Airtel. We wish Shashi the very best for his future endeavours," the statement added.
The company is yet to name Arora's successor.
The UIDAI's interim order on December 16 had come after some customers of the telecom major alleged that the company had, without their consent, opened their bank account in Airtel Payments Bank when they used the "Aadhaar linked e-KYC services". 
The Aadhaar-linked e-KYC service of UIDAI provides an instant, electronic, non-repudiable proof of identity and proof of address along with date of birth and gender, resident's mobile number and email address to the service provider.
It was alleged that at the time of mobile verification using Aadhaar e-KYC, the Airtel retailers were also opening Airtel Payments Bank accounts without "informed consent" of the customers. 
Even LPG subsidy by the government was also getting transferred to these Airtel Payments Bank accounts, without the knowledge of the customers. 
Following the suspension of licence, Bharti Airtel was reported to have deposited a penalty of Rs 2.5 crore with the UIDAI for alleged violation of rules on using Aadhaar-based e-KYC services. The payments bank was also reported to have returned the subsidy amount credited to its customers' accounts.
On Thursday, Airtel was allowed to use Aadhaar to verify its mobile phone customers till January 10. However, the company's e-KYC key remains suspended till UIDAI gets a final report on the probe it has ordered into the misuse. 



×
























Thinking Of
Advertising
Your Business
Online?


AdWords
Can Help
You Reach
The Right
Customers.





































Get $100
Ad Credit
When You
Spend $25.




Start Today




Friday, December 22, 2017

12541 - UIDAI tightens rules to link Aadhaar and bank accounts after Airtel case - Scroll.In

The new regulations make it necessary for a customer’s ‘explicitly informed consent’ to link the unique identification number to an account.

Published Dec 20, 2017 · 07:37 pm

Noah Seelam/AFP
The Aadhaar authority on Tuesday said it was tightening the rules to map or link the unique identification number to a new bank account.
The Unique Identification Authority of India made the decision after allegations that telecom major Bharti Airtel was using its users’ Aadhaar details to open accounts on the Airtel Payments Bank without their consent.
This became a problem because under the current system, the government sends subsidies to the last bank account linked to the Aadhaar number. As a result, more than 23 lakh Airtel customers did not know that their subsidies, including LPG subsidies, were being deposited in these accounts.

The new rules make it necessary for a customer’s “explicitly informed consent” to link Aadhaar to a bank account.
The UIDAI also asked the National Payments Corporation of India to disable the override feature, which many banks were using to seed Aadhaar to accounts without the consent of users.
The National Payments Corporation of India will only allow override requests if the bank confirms that it has the consent of the Aadhaar holder. Banks must also inform account holders through an SMS and email within 24 hours that they have sent a request to put their account on the mapper.
We welcome your comments at letters@scroll.in.

12537 - UIDAI tightens norms for Aadhaar-bank account linking - The Hindu


DECEMBER 19, 2017 20:10 IST


According to the latest rules, ‘explicitly informed consent’ from customers has been made compulsory.

Following the Airtel India-Aadhaar subsidy fiasco, the Unique Identification Authority of India (UIDAI) on Tuesday has tightened the norms for mapping Aadhaar number to a different bank account.

According to the latest rules, ‘explicitly informed consent’ from customers has been made compulsory.
The National Payments Corporation of India (NPCI) will disable the override feature that UIDAI said was being misused by many banks while seeding Aadhaar to accounts without informed consent of residents.
As a result subsidy from the government was being credited to new accounts without their knowledge
The UIDAI further said that there have been complaints pertaining to customer verification. “When an Aadhaar holder visits the telecom service provider for verifying his mobile number, as per Supreme Court's Feb 6, 2017 order, the telecom firm is opening the customer’s payment bank account and puts that bank account on NPCI's Aadhaar Payment Bridge, overriding the existing bank account. The mapping was done without the informed consent of the Aadhaar holder, UIDAI said.
Similar problem was being faced when Aadhaar holders verified their bank accounts to comply with Prevention of Money Laundering rules (the last date for which is now March 31, 2018).
People, particularly in rural and remote areas, were being put to inconvenience as they were clueless about receipt of subsidy and also unable to withdraw the subsidy amount credited in payment bank accounts as payment banks are not having branches or cash out points in sufficient number in these areas, the UIDAI said.
The UIDAI has notified changes to its rules to avoid further inconvenience to Aadhaar holders and to ensure that the Aadhaar collected for a purpose is not used for any other purpose without informed consent of the Aadhaar holders.

12535 - Why UIDAI’s rap on Airtel is a warning for firms dealing with customer data - Live Mint

Airtel’s culpability, if proved, is not having sufficient safeguards in place to protect the identity details of its customers
Last Published: Wed, Dec 20 2017. 05 01 AM IST


With personal data increasingly being rendered vulnerable, companies like Airtel are being called upon to take responsibility for the personal identities of their users. Photo: Pradeep Gaur/Mint

At one level, Bharti Airtel Ltd’s recent problems with the Unique Identification Authority of India (UIDAI), which has temporarily suspended the telecom market leader as well as its payments bank from conducting Aadhaar-based verification of its mobile customers as well those of the bank, using the eKYC process, can just be written off as an isolated case of shocking misdemeanour. The Airtel executives who mounted the devious plan to open bank accounts of some subscribers in another group company Airtel Payments Bank, without their clear and tacit permission can be punished and the company fined as per the clearly laid down rules. UIDAI has alleged that when customers went to Airtel’s mobile app for verification, a box popped up with the statement “Upgrade or create my Airtel Payment Bank wallet using existing Airtel mobile KYC.” In itself, that is kosher, except that the box came pre-checked so unless the user specifically unchecked it, his consent was assumed.

And while UIDAI has appointed consulting firm PricewaterhouseCoopers to audit Airtel’s processes, it isn’t as if the company was caught unawares. The authority had issued two notices prior to suspending Airtel, which shows it was clearly not satisfied with its response. Nor was it an isolated act affecting a handful of customers. Reports indicate that anywhere between 2 million and 3 million accounts may have been thus compromised. 

The allegation that the company’s executives used the Aadhaar-eKYC based verification process to open payments bank accounts of its subscribers is a flagrant breach of trust, the very argument that is being held up to oppose the mandatory linking of various services in the country to Aadhaar. Indeed, the security and privacy of Aadhaar data is exactly what the Supreme Court is currently looking into.

The problem isn’t with Aadhaar as its prime architect Nandan Nilekani has repeated ad nauseam. It is with its use and misuse as has happened in the case of Airtel, which clearly did not follow the guidelines laid down by UIDAI. A single national identity is an important part of any advanced and integrated economy. The social security number as the sole authentication mechanism has been in use in the US for over 80 years, and it is only now that there are mutterings of the need to change to a more modern and scientific system, ironically like Aadhaar.

Airtel’s culpability, if proved, is not having sufficient safeguards in place to protect the identity details of its customers. In principle, there is no difference between Airtel leaking the data to some other company and allowing it for use by Airtel Bank.

Whether by stealth or by connivance, personal data is increasingly being rendered vulnerable. Companies like Airtel are being called upon to take responsibility for the personal identities of their users. This personal identity, which is recognised and upheld in international law through a range of declarations and conventions, is now being freely shared, setting up the grounds for more such incidents.

Oddly, Airtel’s predicament is in many ways similar to the dilemma facing tech companies like Facebook, Google and Twitter—how to manage the contradictions of being hands-off as a platform and hands-on as the carriers of the content that can often be patently and dangerously false, misleading and inflammatory. The spate of fines and other forms of censure that these companies have had to deal with points to the desire of European regulators to intervene in the operations of these companies on grounds of privacy and security. Indeed, last year, the European Union (EU) passed the General Data Protection Regulation (GDPR) to replace its existing Data Protection Directive. The new regulation, which will come into force from 25 May 2018, has been designed to “harmonize data privacy laws across Europe, to protect and empower all EU citizens data privacy and to reshape the way organizations across the region approach data privacy.”

India’s data protection law is still some way off with the committee set up to prepare a structured report on data utility, data privacy and data availability, expected to submit its proposals in the next few months after which the legislation proceedings will start. In the meantime, more such incidents will end up shaking people’s faith in the sovereignty of their personal data and its custodians. 
Data may be the new oil, but it is far more slippery than the former.

Sundeep Khanna is a consulting editor at Mint and oversees the newsroom’s corporate coverage. The Corporate Outsider will look at current issues and trends in the corporate sector every week.

Click here to read more from The Corporate Outsider.

Thursday, December 21, 2017

12529 - Airtel Deposits Interim Fine For Opening Bank Accounts Without Users' Nod - NDTV

Airtel has deposited an interim penalty of Rs.2.5 crore "unconditionally" to the Unique Identification Authority of India (UIDAI), said source.

Business | Press Trust of India | Updated: December 19, 2017 19:08 IST

Airtel Deposits Interim Fine For Opening Bank Accounts Without Users' Nod

Airtel has deposited an interim penalty of Rs.2.5 crore "unconditionally" to the Unique Identification Authority of India (UIDAI), said source.
Business | Press Trust of India | Updated: December 19, 2017 19:08 IST

Airtel will return subsidy worth Rs.190 crore over the next 24 hours to the original accounts.

New Delhi: Airtel has deposited an interim penalty of Rs.2.5 crore with the Aadhaar-issuing body UIDAI after an action against the telecom operator for allegedly opening payments bank accounts of its mobile subscribers without their 'informed consent', according to sources.

The company is learnt to have given the assurance that it will return Rs.190 crore that had flown into the 'unsolicited' payments bank accounts of 31 lakh mobile subscribers over the next 24 hours and will also inform the customers that their subsidy-linked account is being switched back to the originally-chosen account.

Airtel has deposited an interim penalty of Rs.2.5 crore "unconditionally" to the Unique Identification Authority of India (UIDAI), a person familiar with the development told PTI.

"They (Airtel) have also stated that all 31 lakh customers will be intimated by Airtel that their subsidy money is being transferred to the originally-chosen accounts and that henceforth such money will flow into those designated accounts," the source added.

Meanwhile, an e-mail query sent to Airtel with regard to deposit of Rs.2.5-crore interim penalty remained unanswered.

Once the entire process is complete, Airtel will be required to report to the UIDAI with compliance and the authority will take "appropriate view" on the matter at that stage.

Airtel, on Monday, wrote to the National Payments Corporation of India (NPCI) promising to return Rs.190 crore (along with interest) to the consumers' original bank accounts that were linked to the Direct Benefit Transfer (DBT).

The NPCI is an umbrella organisation for all retail payments in India.

Both Airtel and Airtel Payments bank came under fire after the the Sunil Mittal-led firm allegedly opened accounts of its mobile phone subscribers without seeking their "informed consent", and LPG subsidy worth crores was deposited into these accounts.

The government acted swiftly in the matter and the UIDAI, in a strong move late last week, temporarily barred the company from conducting Aadhaar-based SIM verification of mobile customers using eKYC process, and e-KYC of payments bank clients.

Suspending the 'e-KYC licence key', the UIDAI also ordered PricewaterhouseCoopers to conduct an audit of Bharti Airtel and Airtel Payments Bank to ascertain if their systems and processes are in compliance with the Aadhaar Act.

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)

Monday, December 18, 2017

12522 - Rs 167 crore deposited in Airtel Bank without ‘consent’ of 31 lakh users - Gadgets now


Mahendra Singh | TNN | Dec 18, 2017, 09.18AM IST

New Delhi: As much as Rs 167 crore was deposited by 31.21 lakh customers in their Airtel Payments Bank accounts which were activated without their "informed consent", leading to suspension of Aadhaar-linked KYC verification of Bharti Airtel and Airtel Payments Bank. 

The discovery that subsidy amounts for LPG were being deposited in these accounts has led to officials suggesting that it would be appropriate if the sums were returned to the customers. The amounts were collected in an improper fashion and in violation of Unique Identification Authority of India (UIDAI) norms.

The malpractice came to light after the UIDAI investigated a complaint from an individual who said Bharti Airtel not only opened a payments bank account without his permission but also linked it to receive LPG subsidy. The amounts transferred from Hindustan Petroleum Corporation was Rs 40 crore, from Bharat Petroleum Corporation Rs 39 crore and IndianOil Corporation Rs 88 crore. 

An official said the government must act to ensure that the subsidy of Rs 167 crore was returned to the normal bank accounts of customers. He added that the government should stop sending subsidy to payments banks and wallets as the UIDAI investigation found that in several cases, cooking gas subsidies were transferred in the Airtel Payments Bank account of customers without their knowledge, while they had linked the subsidies to their savings bank accounts.

After investigating the case, the UIDAI in its interim order barred Bharti Airtel and Airtel Payments Bank from conducting Aadhaar linked e-KYC verification of SIM cards and bank clients. The UIDAI found that at the time of mobile verification using Aadhaar e-KYC, Airtel retailers were also opening Airtel Payments Bank accounts. The opening of bank account was integrated with the process of mobile verification. 

For the latest news, tech news, breaking news headlines and live updates checkout Gadgetsnow.com

12513 - UIDAI temporarily bars Airtel from conducting Aadhaar linked e-KYC verification - Times of India



TIMESOFINDIA.COM | Updated: Dec 16, 2017, 19:00 IST

HIGHLIGHTS
  • UIDAI has temporarily barred Bharti Airtel and Airtel Payments Bank from conducting Aadhaar linked e-KYC verification of SIM cards and bank clients
  • Last month, UIDAI had reportedly ordered an investigation against Bharti Airtel for alleged violations of the Aadhaar Act

NEW DELHI: On Saturday, UIDAI temporarily barred Bharti Airtel and Airtel Payments Bank from conducting Aadhaar linked e-KYC verification of SIM cards and bank clients.The action follows allegations of Bharti Airtel using the Aadhaar-eKYC based SIM verification process to open payments bank accounts of its subscribers without their 'informed consent'. 

Last month, UIDAI had reportedly ordered an investigation against Bharti Airtel for alleged violations of the Aadhaar Act and is threatening to slap a financial penalty for opening Airtel Payments Bank accounts of customers surreptitiously while carrying out Aadhaar verification of their mobile numbers. 

More than 23 lakh customers have reportedly received as many as Rs 47 crore in their Airtel bank accounts, which they did not know had been opened. 

"The lapses are serious in nature. Prima facie, it is a criminal breach of trust and contract, and there are violations of provisions of the Aadhaar Act," a source, who did not wish to be identified, had told TOI. 

The report suggested that some customers had their cooking gas subsidies landed in their Airtel Payments Bank account, while they had linked the subsidies to their savings bank accounts. After the irregularity came to fore, UIDAI CEO Ajay Bhushan Pandey had said that the authority has received complaints of wrongdoing against "certain telecom companies" during the Aadhaar verification process. He however, had not identified any telecom operator. 

UIDAI's move essentially means Airtel would not be able to, in the interim, carry out 'electronic-verification' or link mobile SIMs of its customers with their 12-digit biometric national ID Aadhaar though the efficient and paperless eKYC (or electronic Know Your Customer) process of UIDAI. Also, Airtel Payments Bank will not be able to open a new account with Aadhaar e-KYC. However, accounts can be opened through alternate methods, if available. 
Recommended By Colombia


The alleged actions of Airtel and Airtel Payments Bank were found to be in violation of different sections of the Aadhaar Act, 2016, which mandates obtaining explicit consent of the individual. Violations are liable to be punished with Rs 1 lakh per day fine and termination of authentication user agreements.




Sources said that the first notice was issued to Airtel on September 18, responding to which Airtel and Airtel Bank stated that they have amended their process and the opening of a bank account is completely de- linked from the process of re-verification of mobile connection. These replies were found to be unsatisfactory by UIDAI, which issued another notice on November 24, as UIDAI kept receiving similar complaints from customers. 

TOP COMMENT
Why not cancel the "Bank license"
Mpraomokkapati

Furthermore, when UIDAI reviewed the Airtel mobile app, it found that when the app is opened, along with the welcome message a pre- ticked consent box is momentarily flashed on the screen which states "Upgrade or create my Airtel Payment Bank wallet using existing Airtel mobile KYC." This was found to reflect blatant disregard of Aadhaar Act and Regulations.

(With inputs from PTI)

Tuesday, December 5, 2017

12460 - UIDAI orders probe against Bharti Airtel for alleged Aadhaar Act violations - Money Control

Nov 30, 2017 09:46 AM IST | Source: Moneycontrol.com


UIDAI orders probe against Bharti Airtel for alleged Aadhaar Act violations

The Unique Identification Authority of India (UIDAI) has ordered a probe against Bharti Airtel for alleged violation of the Aadhaar Act, following the government's direction to link Aadaar to mobile numbers.
Moneycontrol News

The Unique Identification Authority of India (UIDAI) has ordered a probe against Bharti Airtel for alleged violation of the Aadhaar Act, following the government's direction to link Aadhaar to mobile numbers, Times of India reported.

In addition, the regulator is said to have slapped a penalty on the company for discreetly opening Payments Bank accounts of customers while carrying out Aadhaar verification of their mobile numbers.

The probe was ordered after complaints of prima facie violations were found to be valid, said the report.
"The lapses are serious in nature. Prima facie, it is a criminal breach of trust and contract, and there are violations of provisions of the Aadhaar Act," a person aware of the matter told the paper on conditions of anonymity.

The issue came to light when some customers complained about receiving their cooking gas subsidy — sent under the central government's Direct Benefit Transfer (DBT) scheme — in the Airtel Payments Bank account instead of their designated savings bank accounts with other banks.

They alleged these accounts were opened without their authorisation or knowledge. Following which, the UIDAI sent a showcause notice to Airtel.

 UIDAI CEO Ajay Bhushan Pandey told the paper the authority has received complaints of wrongdoing against "certain telecom companies" during the Aadhaar verification process.

"We have ordered an investigation into the matter. If the allegations are found to be true, after a thorough investigation, then they are of a very serious nature," Pandey said without naming any operator.

"An inquiry is on, and we expect to take a decision on the matter soon," Pandey added.

Airtel spokesperson denied any wrongdoing by the company, however, added that the company is working towards strengthening processes with retail partners to ensure transparency.

"Airtel Payments Bank is fully compliant with all guidelines and follows a stringent customer on-boarding process. Airtel Payments Bank accounts are opened only after explicit consent from the customer. A separate consent for DBT is taken from all customers," the company said in a response to a query regarding the same.

Wednesday, November 1, 2017

12179 - Telecoms' Aadhaar con: A portent of things to come - Sify


Source : SIFY By : Nandini Krishnan Last Updated: Wed, Oct 04, 2017 12:03 hrs 

Since the inception of the idea of Aadhaar, both the UPA government that made a push for it and the NDA government which was once so anti-Aadhaar have been trying to persuade us that feeding our biometric data into an all-encompassing identity card is a good idea. They have tried to assure us that our details are safe and encrypted, that only the powers that be will have access to them, that private companies will not be able to make capital of them, and that this is among the many drastic measures they have brought in with the ostensible aim of eliminating fraud. However, from leaks on government websites to calls from various vendors, those who have registered for Aadhaar have had plenty of evidence that their data is not as safe or private or inaccessible as they would like to believe. Despite the Supreme Court’s decision that the right to privacy is a fundamental one, guaranteed in the constitution, this right is being constantly violated. The latest controversy is courtesy of mobile operators which insist on numbers being linked to Aadhaar, more than four months ahead of the government’s deadline (which could be overruled). I use Vodafone, and have had devious messages claiming my SIM is expiring, and asking me to rush to a Vodafone store immediately for continued service. When I called them up, they told me it was because Aadhaar linking was mandatory. When I told them it was not and the case was being heard, and asked to speak to the manager, the executive asked me to hold the line until it was cut. 

Airtel has been recording the biometric details of clients for Aadhaar verification. When the court is yet to decide on whether Aadhaar can be forced upon the country, and when the question of whether Aadhaar is necessary to acquire a new SIM card is still under review, why is a private operator recording biometric data from existing customers, simply to continue providing service? 

For the record, in all the Western countries that India aspires to be like, one needs no identification to pick up a pre-paid SIM card. One literally arrives at an airport, walks into a shop and buys a UK, US, or France pay-as-you-go SIM card, no questions asked. In India, though, we are practically being microchipped, even as the case concerning privacy is sub-judice. 

Even if Aadhaar were to be made mandatory for government services, why does a private company need our fingerprints? 

Fingerprints are not required to link one’s bank account, PAN card, ration card, or LPG subsidy. And neither Airtel nor the Telecom Regulatory Authority of India (TRAI) has any answers to the question of how they will guarantee that this sensitive data is not misused. 

In fact, there is evidence that the data is being misused. 
On September 21, the Unique Identification Authority of India (UIDAI) sent a notice to Airtel and its payments bank for flouting the rules governing Aadhaar (apparently, there are a few), in the wake of allegations that the operator’s retailers were opening payments banks in consumers’ names, using their Aadhaar details, without informed consent. The notice reads that the UIDAI has come to learn that "Airtel retailers are allegedly opening Airtel payments Bank account at the time of performing Aadhaar e-KYC verification without informing the purpose of e-KYC and also without taking informed consent of the customer", and also that this account was then linked to receiving LPG subsidy. Airtel has not given a clear response to the media’s enquiries regarding the notice. Their statement only maintains that they have not done anything without consumer consent. For the record, while there has been a Government of India Gazette notification that mandates linking of Aadhaar with bank accounts, there does not seem to be one that requires mobile phone operators to link Aadhaar for all existing customers and collect biometric data to do so, nor one that implies mobile phone service will be discontinued if the existing numbers are not linked with Aadhaar. 

In a Facebook post that has more than 900 shares already, writer Amandeep Sandhu recounted his experience in trying to question Airtel on its claim that the government requires customers to link their phone numbers with Aadhaar. In his email to the customer service team, Sandhu wrote: "I seek to know the Government Notification number, the Law and Clause under which you have been instructed to collect Aadhar information from millions of your customers. Also, whose notification is it? Your customer service manager, please check records around 10.30 PM, was not clear if it was a TRAI Notification or a notification from the Home Ministry." He also attached a screenshot of a tweet by Union Law Minister Ravi Shankar Prasad's tweet at 10:47 am on 10 September this year, which reads, "No one is forcing to link Aadhaar with all facilities [sic.]". He has not had a response from Airtel. And if the service provider cannot quote the relevant law or notification, its linking of Aadhaar with mobile numbers, as well as its collection of biometric data, are illegal. Vodafone, Jio, as well as Idea have been harassing clients to switch to 4G SIMs – new SIMs require Aadhaar verification – or, in the case of their having already switched, to link with Aadhaar "immediately". If we allow them to get away with this con, if no strict action is taken or penalty imposed for their violation of our privacy, it won’t be long before other private companies begin to tap this database. It is frightening to think that there are hundreds of millions of people in this country who have already linked their biometric details with a device that can track their locations. In a country where journalists and rationalists are targeted by hit men and politicians, is this a risk any of us can afford to take?


Read more at: http://www.sify.com/news/telecoms-aadhaar-con-a-portent-of-things-to-come-news-columns-rkduMcagjcigi.html

Sunday, September 24, 2017

12111 - UIDAI slaps notice on Airtel, its payments bank for flouting Aadhaar rules - Deccan Herald

PTI
Published
Sep 21, 2017, 6:10 pm IST

It alleged that Airtel retailers have been opening payments bank accounts using Aadhaar information of customers.


UIDAI has slapped notices on Bharti Airtel and Airtel Payments Bank over its retailers allegedly opening payments bank accounts without taking "informed consent" of customers who go for Aadhaar-based mobile SIM verification. (Photo: Representational/AFP)

New Delhi: The UIDAI has slapped notices on Bharti Airtel and Airtel Payments Bank over its retailers allegedly opening payments bank accounts without taking "informed consent" of customers who go for Aadhaar-based mobile SIM verification.

The Aadhaar-issuing body, Unique Identification Authority of India (UIDAI), in the notices seen by PTI, stated that acts of not taking consent and informing the purpose of authentication was a violation of rules and punishable with financial penalties.

It also asked both Bharti Airtel and its payments bank entity to take immediate corrective measures and report back to the authority on the same.

Reached for comments, an Airtel spokesperson said the payments bank is fully compliant with RBI and UIDAI guidelines and follows a stringent customer onboarding process. "Airtel Payments Bank accounts are opened only after explicit consent from the customer. We will continue to educate retailers and strengthen our process to ensure transparency to customers and compliance with regulation," the company said in an e-mail response.

The UIDAI in the notices stated that it has come to know that "Airtel retailers are allegedly opening Airtel payments Bank account at the time of performing Aadhaar e-KYC verification without informing the purpose of e-KYC and also without taking informed consent of the customer".

Also, certain complaints were made to UIDAI alleging that Airtel opened payments bank account without approval and the said account was then linked for receiving LPG subsidy.

The UIDAI is learnt to have said such acts violated specific sections of Aadhaar Act which require entities to mandatorily obtain consent of an individual before collecting authentication related information, and also inform them about the purpose of the authentication.

When contacted, UIDAI spokesperson refused to comment on the matter.

In November 2016, Airtel Payments Bank had rolled out banking services in Rajasthan, becoming the first payments bank to go live in the country.

Payments banks can accept deposits and savings bank deposits from individuals and small businesses, up to a maximum of Rs 1 lakh per account.

Monday, December 14, 2015

9166 - Morpho and Airtel to test Aadhaar-based mobile phone sign-up - Biometric Update



December 11, 2015 - 

Morpho (Safran) has been chosen by Airtel, a leading Indian telecom operator, to become its key partner in an electronic know your customer (e-KYC) pilot project operating in Uttar Pradesh.

In March, Airtel launched an Aadhaar-based e-KYC initiative in the Indian state for subscriber verification. e-KYC is a process that enables banking and telecom customers to open and access accounts by way of their Aadhaar number. Customers in Uttar Pradesh will be required to use their Aadhaar number along with a biometric identifier, such as an iris scan or fingerprint, in order to activate a new prepaid or postpaid mobile phone.

Aadhaar, the world’s largest universal Civil ID program, is the biometric database used by the Indian government to provide social services. To date, Aadhaar has issued 630 million Aadhaar numbers, and has enrolled approximately 850 million people. The database is actively used for monitor school attendance and issue natural gas subsidies to India’s rural poor. The government however intends to use the system for a range of other purposes, including as a means of identification for healthcare insurance beneficiaries, bank accounts, and the issuance of passports and mobile SIM smartphone cards. This pilot project by Airtel will be a key test of Aadhaar. Airtel selected Morpho to develop a new, digitally-based, paperless mobile phone subscriber process.

Sanjeev Shriya, Senior Vice President, India, at Morpho, said: “India is currently one of the best possible global markets to establish cutting-edge technologies. This project with Airtel perfectly demonstrates Morpho’s global leadership in biometric-based solutions for mobile network operators. Strong KYC solutions are at the heart of future mobile ID business trends. They will allow mobile network operators to deploy a whole new set of services by knowing their customers better.”
Advertisement

Morpho is showcasing its relationship with Airtel, since the telecom is the leading mobile network operator in India, with the country’s largest installed subscriber base, pegged at 228 million end users. The Airtel pilot project will be tested at various retail points in Lucknow, which is the Uttar Pradesh state capital. The pilot will use Morpho’s managed services, along with the biometric firm’s branded MorphoTablets. Airtel subscribers are expected to benefit from greater convenience, by avoiding the need to provide paper identification, thereby allowing quicker activation of mobile subscriptions.


Yves Portalier, Vice President and General Manager Telecom Business Unit of Morpho, said: “Morpho has placed great emphasis on developing a solution that is paperless, flexible, fast and cost effective. Mobile network operators can establish more sophisticated services through strong, trusted ID management, thus avoiding fraud. As people and objects become more and more connected, security and authentication have taken on a new dimension. Morpho is focused on digital ID solutions that enable service providers to reinforce authentication processes and guarantee secure access to multiple devices and accounts.”