A Punjab government website exposed the Aadhaar numbers of more than 20,000 people who applied for low-cost housing in Ludhiana and Jagraon, the latest in a string of blunders by administrative officials that jeopardise citizen privacy.
Aadhaar, a 12-digit identity number, is linked to a person’s biometric details and has become increasingly mandatory for government services. Experts and activists have raised concerns over the risks to privacy it poses, and believe the country’s lackadaisical cyber security standards can put confidential information at risk of crimes such as identity theft.
India’s Supreme Court is currently in the process of determining whether the Aadhaar programme violates rights to privacy.
Around 20,100 Aadhaar numbers, the names of the people it belonged to and their father’s name were published on Greater Ludhiana Area Development Authority (GLADA) website. The details were published as lists of applicants for EWS houses (homes for people from economically weaker sections) under the Pradhan Mantri Awas Yojana (PMAY) programme, and of those who won the draw.
It was unclear how long the lists were up, but officials removed links leading to them on Monday when Hindustan Times brought it to their attention. The lists, while removed from the homepage, stayed online on the GLADA server and could be accessed by anyone who had the direct link.
According to Section 29 (4) of the Aadhaar Act, no Aadhaar number or core biometric information can be published, displayed or posted publicly, except for specified purposes.
Earlier, GLADA officials were unaware of how the Aadhaar numbers ended up online. “I will look into the matter,” additional chief administrator (ACA) Neeru Katyal Gupta said.
GLADA chief administrator Parminder Singh Gill said, “I have spoken to the official concerned who informed me that no Aadhaar card number was uploaded on the website. The GLADA’s website is being operated at the PUDA (Punjab Urban Development Authority) headquarters in Mohali. We are trying to contact the headquarters in this regard.”
Shortly afterwards, GLADA removed the links to both lists.
In April, more than a million Aadhaar numbers were leaked by a Jharkhand government website. Officials involved were similarly unaware of how the data made its way onto the public domain, prompting experts to point to a systemic flaw in India’s e-governance model.