Applications for the LAMP Fellowship 2025-26 will open on December 1, 2024. Sign up here to be notified. Last date for submitting the applications is December 21, 2024.

Yesterday, the Supreme Court delivered its first verdict in a series of legal challenges that have been made against the Aadhaar project.[1]  In the present matter, the court was examining whether a provision of the Finance Act, 2017 that made Aadhaar mandatory for filing of income tax returns and applying for Permanent Account Number (PAN) cards was constitutionally valid.  The court has upheld the validity of this provision, subject to a few qualifications.  Below, we discuss the background of the Aadhaar project, why the courts have stepped in to examine its legality, and some aspects of the recent judgement.

What is Aadhaar about, and how is it being used?

Earlier, various identity proofs were required for access to governments benefits, subsidies and services, such as a ration card, driving license or voter id.  However, as these proofs could be easily duplicated or forged, there was leakage of benefits and subsidies to ineligible beneficiaries.  The Aadhaar project was initiated in 2009 to address these problems.  It was envisaged as a biometric-based unique identity number that could help identify eligible persons.  It was thought to be a more reliable identity proof, because it sought to authenticate a person’s identity based on their unique biometrics, like fingerprints and iris scans.1

In 2016, Parliament enacted the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 to provide legislative backing to the project.  This Act allowed Aadhaar to be used for authentication purposes by the central and state government, as well as by private bodies and persons.[2]

Under its provisions, government has been issuing various notifications making Aadhaar mandatory for government projects, such as LPG subsidies and Mid-Day Meal scheme.[3]  In addition, in 2017, Parliament passed the Finance Act to amend the Income Tax Act, 1961, and made Aadhaar mandatory for filing of income tax returns, and applying for PAN.[4]

What is the information collected under Aadhaar?

To obtain an Aadhaar number, a person is required to submit their : (i) biometric information (photograph, 10 fingerprints, scans of both irises), and (ii) demographic information (name, date of birth, gender, residential address) to the Unique Identification Authority of India (UIDAI).[5]  The Aadhaar number, the demographic and biometric information (called identity information) is together stored in the Central Identities Data Repository.  In addition, every time a person’s identity is authenticated using Aadhaar, information related to the authentication request is recorded as well.

How is this information protected?

While India does not have a comprehensive law on privacy and data security, the Aadhaar Act, 2016 has some protections.  For example, it prohibits UIDAI and its officers from sharing a person’s identity information and authentication records with anyone.  It also forbids a person authenticating another person’s identity from collecting or using their information without their consent.  Other protections include prohibitions against publicly displaying a person’s Aadhaar number and sharing of a person’s fingerprints and iris scans with anyone.  Note that there are penalties prescribed for violation of these provisions as well.[6]

However, the Act permits information be disclosed in the interest of national security and on the order of a court.[7]

The UIDAI authority has been made responsible for the operation and maintenance of the Aadhaar database, and for laying down the security protocols for its protection.[8]

Why did the courts step in?

Even as Aadhaar is being rolled out, with about 111 crore of the 125 crore population already on the database, there are several important constitutional and legal questions around the unique identity project.[9][10]  While yesterday’s judgement addresses one of these issues, other questions remain unresolved.  A description of the key legal questions is provided below.

Privacy:  It has been argued that the collection of identity data without adequate safeguards interferes with the fundamental right to privacy protected under Article 21 of the Constitution.  Article 21 guarantees right to life and personal liberty.  In August 2015, a three judge bench of the Supreme Court passed an order stating that a larger bench must be formed to decide the questions of: (i) whether right to privacy is a fundamental right, and (ii) whether Aadhaar violates this right.[11]  However, the court has not set up a larger bench to hear these petitions till June 2017.[12]

Mandatory vs voluntary:  Another question before the court is whether Aadhaar can be made mandatory for those government benefits and services, that citizens are entitled to under law.  In 2015, the Supreme Court passed some interim orders stating that: (i) Aadhaar cannot be made mandatory for providing citizens with benefits and entitlements, and (ii) it can only be used for seven schemes including PDS distribution of foodgrains and kerosene, LPG distribution scheme, MGNREGA wage payments, and Prime Minister’s Jan Dhan Yojana.11

Subsequently, Parliament enacted the Aadhaar Act, 2016, and the government has been issuing notifications under it to make Aadhaar mandatory for various schemes.3  In light of this, more petitions have been filed challenging these notifications.[13]  Judgements on these petitions are awaited as well.

Linking Aadhaar with PAN:  In 2017, after Parliament made Aadhaar mandatory for filing of tax returns and applying for PAN under the Income Tax Act, 1961, fresh petitions were filed in the Supreme Court.  The new provision stated that if a person failed to link their PAN with the Aadhaar number by a date notified by the central government, their PAN will be invalidated.  The government said this will decrease the problem of multiple PAN cards obtained under fictitious names and consequent tax fraud and tax evasion, because Aadhaar will ensure proper identification.1,[14]  However, the petitioners argued that this may interfere with a person’s fundamental rights, such as their right to practice any profession, trade or business and right to equality.  It is this question that has been addressed in the new judgement.1

Money Bill:  The fourth question is related to the manner in which the Aadhaar Act, 2016 was passed by Parliament.  The Act was passed as a Money Bill.  A Money Bill only needs to be passed by Lok Sabha, while Rajya Sabha may make non-binding recommendations on it.  In case of the Aadhaar Act, Rajya Sabha made some recommendations that were rejected by Lok Sabha.  It has been argued before the courts that the Aadhaar Act does not qualify as a Money Bill because it contains provisions unrelated to government taxation and expenditure.13,[15]

What has the judgement held?

The Supreme Court has held that the new provision of the Income Tax Act that makes Aadhaar mandatory for income tax assessees is not in violation of the fundamental right to equality, or the fundamental right to practice one’s profession or trade.  The petitioners had argued that the new provision discriminates between individual and non-individual assessees (e.g. companies or firms), because it only seeks to address tax fraud by individuals.  They had also contended that Aadhaar could not address the problem of tax fraud through duplicate PANs because there was evidence to show that people had multiple Aadhaar numbers as well.  The court rejected these arguments (as well as arguments related to freedom to carry on business), stating that Aadhaar is perceived as the best method of eliminating duplicate PANs, and therefore there is reasonable rationale behind linking the PAN database with Aadhaar.1

The court decided not to examine questions related to human dignity and privacy, on the ground that issues affecting Article 21 will be examined by a larger bench to be set up by the court.  However, it granted relief to people, who have not enrolled for Aadhaar, by stating that their PAN cards cannot be invalidated till the time when the matter is finally decided by such a bench.

This, in effect, means that the debate around constitutionality and legality of the Aadhaar project will remain ongoing till a judgement is finally pronounced on whether Aadhaar is in violation of right to privacy under Article 21.

[1] Binoy Viswam vs Union of India, Supreme Court, Writ Petition (Civil) No. 247 of 2017, http://www.sci.gov.in/pdf/jud/wc24717_Sign.pdf.

[2] Sections 7, 8 and 57, Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.

[3] Unstarred Question No. 4126, Lok Sabha, March 27, 2017; Unstarred Question No. 1209, Lok Sabha, February 9, 2017; S.O. 371 (E), Ministry of Consumer Affairs, Food and Public Distribution, February 8, 2017, http://dfpd.nic.in/writereaddata/Portal/Magazine/Document/1_211_1_aadhaar-notification.pdf; S.O. 369 (E), Ministry of Agriculture and Farmers Welfare, February 8, 2017, http://www.egazette.nic.in/WriteReadData/2017/174076.pdf.

[4] The Finance Bill, 2017, http://www.prsindia.org/billtrack/the-finance-bill-2017-4681/.

[5] Regulations 3 and 4, Aadhaar (Enrolment and Update) Regulations, 2016.

[6] Sections 28-47, Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.

[7] Section 33, Section 23, Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.

[8] Section 23, Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016.

[9] “UIDAI achieves 111 crore mark on Aadhaar generation; Unique identity covers over 99 percent adult residents of India”, Press Information Bureau, January 27, 2017.

[10] Justice K. Puttaswamy (Retd) and Another vs Union of India and Others, Supreme Court, Writ Petition (Civil) No. 494 of 2012; Jairam Ramesh vs Union of India, Writ Petition (Civil) 231 of 2016; S.G. Vombatkere and Another vs Union of India and Others, Supreme Court, Writ Petition (Civil) 797/ 2016; “Aadhaar: What are the pending cases before the Supreme Court”, Indian Express, May 31, 2017, http://indianexpress.com/article/india/aadhaar-what-are-the-pending-cases-before-the-supreme-court/.

[11] Justice K. Puttaswamy (Retd) and Another vs Union of India and Others, Supreme Court, Writ Petition (Civil) No. 494 of 2012, September 23, 2013, August 11, 2015, October 15, 2015.

[12] “The Aadhaar/ PAN Judgement”, Indian Constitutional Law and Philosophy Blog, https://indconlawphil.wordpress.com/2017/06/09/the-aadhaarpan-judgment/.

[13] “Aadhaar: What are the pending cases before the Supreme Court”, Indian Express, May 31, 2017, http://indianexpress.com/article/india/aadhaar-what-are-the-pending-cases-before-the-supreme-court/.

[14] Uncorrected Lok Sabha Debates, March 22, 2017, Pg. 240, http://164.100.47.193/newdebate/16/11/22032017/Fullday.pdf.

Our Constitution provides protection against laws imposing criminal liability for actions committed prior to the enactment of the law. Article 20 (1) under the Part III (Fundamental Rights), reads: 20. (1) No person shall be convicted of any offence except for violation of a law in force at the time of the commission of the act charged as an offence, nor be subjected to a penalty greater than that which might have been inflicted under the law in force at the time of the commission of the offence. Thus, the maximum penalty that can be imposed on an offender cannot exceed those specified by the laws at the time. In the context of the Bhopal Gas tragedy in 1984, the Indian Penal Code (IPC) was the only relevant law specifying criminal liability for such incidents. The CBI, acting on behalf of the victims, filed charges against the accused under section 304 of the IPC (See Note 1). Section 304 deals with punishment for culpable homicide and requires intention of causing death. By a judgment dated September 13, 1996, the Supreme Court held that there was no material to show that “any of the accused had a knowledge that by operating the plant on that fateful night whereat such dangerous and highly volatile substance like MIC was stored they had the knowledge that by this very act itself they were likely to cause death of any human being.” The Supreme Court thus directed that the charges be re-framed under section 304A of the IPC (See Note 2). Section 304A deals with causing death by negligence and prescribes a maximum punishment of two years along with a fine. Consequently, the criminal liability of the accused lay outlined by section 304A of the IPC and they were tried accordingly. Civil liability, on the other hand, was adjudged by the Courts and allocated to the victims by way of monetary compensation. Soon after the Bhopal Gas tragedy, the Government proposed and passed a series of laws regulating the environment, prescribing safeguards and specifying penalties. These laws, among other things, filled the legislative lacunae that existed at the time of the incident. Given the current provisions (See Note 3), a Bhopal like incident will be tried in the National Green Tribunal (once operationalized) and most likely, under the provisions of the the Environment (Protection) Act, 1986. The criminal liability provisions of the Act (See Note 4) prescribe a maximum penalty of five years along with a fine of one lakh rupees. Further, if an offence is committed by a company, every person directly in charge and responsible will be deemed guilty, unless he proves that the offence was committed without his knowledge or that he had exercised all due diligence to prevent the commission of such an offence.

The civil liability will continue to be adjudged by the Courts and in proportion to the extent of damage unless specified separately by an Act of Parliament.

Notes 1) IPC, Section 304. Punishment for culpable homicide not amounting to murder Whoever commits culpable homicide not amounting to murder shall be punished with imprisonment for life, or imprisonment of either description for a term which may extend to ten years, and shall also be liable to fine, if the act by which the death is caused is done with the intention of causing death, or of causing such bodily injury as is likely to cause death, Or with imprisonment of either description for a term which may extend to ten years, or with fine, or with both, if the act is done with the knowledge that it is likely to cause death, but without any intention to cause death, or to cause such bodily injury as is likely to cause death. 2) IPC, Section 304A. Causing death by negligence Whoever causes the death of any person by doing any rash or negligent act not amounting to culpable homicide, shall be punished with imprisonment of either description for a term which may extend to two years, or with fine, or with both. 3) Major laws passed since 1984: 1986 - The Environment (Protection) Act authorized the central government to take measures to protect and improve environmental quality, set standards and inspect industrial units. It also laid down penalties for contravention of its provisions. 1991 - The Public Liability Insurance Act provided for public liability - insurance for the purpose of providing immediate relief to the persons affected by an accident while handling hazardous substances. 1997 - The National Environment Appellate Authority Act established to an appellate authority to hear appeals with respect to restriction of areas in which any industries, operations or processes are disallowed, subject to safeguards under the Environment (Protection) Act, 1986. 2009 - The National Green Tribunal Act, yet to be notified, provides for the establishment of a tribunal for expeditious disposal of cases relating to environmental protection and for giving relief and compensation for damages to persons and property. This Act also repeals the National Environment Appellate Authority Act, 1997. 4) Criminal liability provisions of the Environment Protection Act, 1986 Section 15. Penalty for contravention of the provisions of the Act (1) Whoever fails to comply with or contravenes any of the provisions of this Act, or the rules made or orders or directions issued thereunder, shall, in respect of each such failure or contravention, be punishable with imprisonment for a term which may extend to five years with fine which may extend to one lakh rupees, or with both, and in case the failure or contravention continues, with additional fine which may extend to five thousand rupees for every day during which such failure or contravention continues after the conviction for the first such failure or contravention. (2) If the failure or contravention referred to in sub-section (1) continues beyond a period of one year after the date of conviction, the offender shall be punishable with imprisonment for a term which may extend to seven years. Section 16. Offences by Companies (1) Where any offence under this Act has been committed by a company, every person who, at the time the offence was committed, was directly in charge of, and was responsible to, the company for the conduct of the business of the company, as well as the company, shall be deemed to be guilty of the offence and shall be liable to be proceeded against and punished accordingly: Provided that nothing contained in this sub-section shall render any such person liable to any punishment provided in this Act, if he proves that the offence was committed without his knowledge or that he exercised all due diligence to prevent the commission of such offence.