
New Delhi, March 19: Aadhaar has established itself as the world’s largest biometric identification system, boasting approximately 1.34 billion active users and over 17,000 crore authentication transactions completed to date. This information was shared by Jitin Prasada, the Union Minister of State for Electronics and Information Technology.
In a written response to a question in the Lok Sabha, Prasada highlighted the significant role of the Unique Identification Authority of India (UIDAI) in enabling identity verification for service delivery through the Aadhaar system.
He explained that UIDAI provides authentication services to authorized entities, allowing for identity verification using one-time passwords (OTPs), fingerprints, iris scans, and facial recognition.
Furthermore, he noted that the Aadhaar-based facial recognition system used by authorized entities is powered by artificial intelligence (AI) and machine learning technologies to ensure accurate verification.
According to the minister, organizations wishing to utilize Aadhaar authentication services must register as Authentication User Agencies (AUAs) or KYC User Agencies (KUAs) in accordance with the provisions of the Aadhaar Act.
Regarding data access and security, Prasada mentioned that authentication logs are retained by AUAs and KUAs for two years, and Aadhaar holders can use these logs for grievance redressal. These logs are stored for five years before being deleted.
He also emphasized that the Aadhaar system is designed with robust privacy safeguards, including the encryption of demographic data both at rest and in transit, along with legal restrictions on its collection, storage, and use.
The minister highlighted that UIDAI adheres to a three-tier audit framework, which includes self-compliance audits, annual information security audits, and Governance, Risk, Compliance, and Privacy (GRCP) audits, to ensure the integrity of the system.
Additionally, detailed standard operating procedures mandate informed consent from users, restricted use of authentication for specific purposes, secure data storage, the use of certified devices, and restrictions on the retention of biometric data by entities.
The government has stated that Aadhaar data is stored and processed within India, and security measures are in place to prevent any violations of these provisions.





Leave a Comment