Unique Identification Authority of India (UIDAI) CEO Ajay Bhushan Pandey told the Supreme Court on Tuesday that his agency hadn't had a data breach since its inception seven years ago.There has not been a single breach in the past seven years in the Central Identities Data Repository (CIDR) that stores and manages data for the country's Aadhaar project, he said,Speaking to privacy concerns, Pandey submitted that UIDAI did not “collect emotions, likes/dislikes or pull out data” of individuals. For UIDAI, authentication of Aadhaar details was “purpose-blind.” It had no aggregate record of the purpose, location or details of data of Aadhaar holders.He said “core biometrics” like fingerprints and iris scans were only shared if there was a national security threat. Even this would require consent at the Cabinet Secretary level. “We have not received a single request so far,” Mr. Pandey said.Sharing demographic Aadhaar details like name, gender, date of birth and place would require the consent of the district judge.”We do not collect details of transactions. All we do is see whether a person is authenticated or not… We get a lot of requests from the income tax department. They are under the impression that we have a lot of data. We tell them we do not,” the UIDAI CEO told a Constitution Bench led by Chief Justice Dipak Misra.Pandey said “other organisations reveal Aadhaar numbers in the public domain” and this was often mistaken as breach from the Aadhaar database. He said he had been telling these organisations that “wherever you display Aadhaar numbers in public domain, display only the last four digits… but there are a lot of people who have to get to that mentality.”
Select Page















