Securing the Adhaar data

Contact Counsellor

CategoryPolity

Last Updated01/06/2022

Unique Identification Authority of India issued a warning to public and then withdrew it.

UIDAI, statutory body to collect Aadhaar data, issued first press release warning public not to share photocopy of Aadhaar with any organisation, as it can be misused.
It recommended masked Aadhaar, which displays only last four digits of Aadhaar number be used for such purposes.
Asked public to avoid using public computers to download e-Aadhaar.
While doing they should ensure that any downloaded copies of same are permanently deleted from that computer. Organisations that have obtained User License from UIDAI can use Aadhaar to establish the identity of a person.

After press release, many appreciated that this statement was needed, given concerns over misuse of Aadhaar data.
Many private entities insist on Aadhaar card but there is no clarity on how they keep these data private and secure.
UIDAI withdrew press release, as it could be open to misinterpretation.
It said : Aadhaar card holders to exercise normal prudence in using and sharing their UIDAI Aadhaar numbers.
There are enough security features to keep it safe.

Steps to secure Aadhaar data.
Using two-factor authentication on Aadhaar card, turning on biometric lock, and using Virtual Identity or VID for authentication.
Two-factor authentication:
- It is important to link Aadhaar to primary mobile number and email ID.
- This is where UIDAI will send OTP if someone tries to access Aadhaar account or using it for any verification.
Masked Aadhaar copy:
- Download ‘Masked Aadhaar’ copy from official UIDAI website.
- Share a photocopy or version of this, instead of full Aadhaar id.
- This version only has the last four digits of your Aadhaar number, instead of the full number.
Locking biometrics:
- One can lock Aadhaar from UIDAI website.
- After locking biometrics it can no longer be used for authentication.
- OTP-based authentication would continue to be available as needed.
- Users can lock this data temporarily or permanently, depending on preference, and it can be unlocked in both cases.
Use VID:
- Virtual Identity, or VID, is a system of “Limited KYC” .
- It hides Aadhaar number from authenticating agency, while still confirming identity of the user.
- This is a 16-digit number, but temporary in nature.
- So, unlike permanent 12-digit Aadhaar number, VID is valid only for some time.
- Old VID expires when new one is generated, and only one valid VID number can be there against a particular Aadhaar number at any given point in time.

Prelims take away