Delhi HC Issues Notice On Prof. Shamnad Basheer’s Petition Seeking Exemplary Damages For Aadhaar Data Leak [Read Petition]

The Delhi High Court on Tuesday issued notice on a petition filed by IP Academic Prof. Shamnad Basheer alleging a violation of the fundamental right to privacy as guaranteed under Article 21 of the Constitution and as affirmed in Justice KS Puttaswamy v Union of India due to Aadhaar data breaches.The notice was issued by a Bench comprising Justice Ravindra Bhat and Justice Anu Malhotra, directing the Respondents—Unique Identification Authority of India (UIDAI), Union of India, National Informatics Centre and Ministry of Communications and Information Technology— to file their response within six weeks. The matter will next be heard on 19 November. The petition had earlier come up before a Bench comprising Justice Sanjiv Khanna and Justice Chandrashekhar on 18 May. The Court had, however, opined that it would wait for the outcome of the petition on Aadhaar pending before the Supreme Court before taking this one up. This was in view of the submissions made by the Counsel for Aadhaar to the effect that the issues raised in the petition are the same as those raised before the Supreme Court. The Court had then posted the matter for 21 August.Curiously, during the hearing on Tuesday, UIDAI and its counsel sought deletion of Respondent no. 2, i.e. the Union of India through its Cabinet Secretary as a party to the suit. The petitioner then requested more time for deliberation, owing to which the Court decided to take up the request on the next date of hearing.The petition was filed as part of the latest IDIA initiative on promoting public interest lawyering (PPIL), an initiative meant to raise public interest causes, and in the process, train IDIA scholars and volunteers through clinical legal education.While Prof. Basheer was represented pro-bono by leading criminal lawyer Siddharth Aggarwal, assisted by Rupali Samuel, the IDIA team working on the petition was initially led by their P-PIL fellow, Balu Nair, and is now being headed by Eshwar Ramachandran.No Challenge to Aadhaar Act’s Constitutional validityAddressing all Aadhaar card holders as Aadhaaris, Mr. Basheer’s petition traces the journey of how Aadhaar was conceptualized as a voluntary scheme but was gradually morphed into a near compulsory mandate, with forced linkages to a slew of essential services, including banking services, filing of tax returns and cell phone subscriptions. It then asserts that with Aadhar being all-pervasive, the contemporaneous privacy concerns have also risen.The petition however clarifies that it does not intend to challenge the constitutional validity of the Aadhar Act, but only seeks to "establish that the Respondents continue to compromise the security of Aadhaar data through their negligent acts/omissions and consequently violate the fundamental privacy rights of the Petitioner and that of the public at large". It therefore essentially makes a direct claim to damages using common law theories, while also challenging the constitutional validity of section 43A of the IT Act, taking objection to the adjudication of legal disputes by a single government officer.Fear of Aadhaar data being misused for personal gainIn his petition, Prof. Basheer recalls how he obtained an Aadhaar card back in 2015 believing the project to be safe, secure and consent based. Soon after, he also linked his bank account with Aadhaar for the fear of his account being deactivated.However, around the beginning of this year, he was devastated to learn through news reports that the confidentiality of Aadhaar data had been compromised, not once but several times over. For instance, he cites a news report by Tribune wherein Tribune claimed to have “purchased” a service being offered by anonymous sellers over WhatsApp that provided unrestricted access to details for any of the more than 1 billion Aadhaar numbers created in India thus far.Listing down various other illustrative examples demonstrating such breach of Aadhaar data, he now submits, "He was particularly distressed to note that most of these breaches pertained to personal identity data maintained with the Central Identities Data Repository, a centralized database containing all information collected from Aadhaar applicants by Respondent No.1 and its various affiliates/partners, including sensitive personal information such as biometric data.The Petitioner fears that his valuable data (as also that of countless other Aadhaaris) is in the illegal possession of unauthorized third parties, who can, at any time, misuse it for their own personal gain. This fear is not just a theoretical one, but one which has played out in the past."Violation of statutory provisionsThe petition attributes the security breaches to "negligence/willful recklessness" on the part of the UIDAI due to the absence of reasonable security measures. It then asserts that UIDAI's conduct violates Aadhaar Act and associated regulations, as well as the Information Technology Act, 2000 and associated rules. UIDAI's conduct, it argues,...

Delhi HC Issues Notice On Prof. Shamnad Basheer’s Petition Seeking Exemplary Damages For Aadhaar Data Leak [Read Petition]

Apoorva Mandhani

Tags