Aadhaar Act, 2016

The Aadhaar Act, 2016 — formally the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 — gave statutory backing to a programme that had operated since 2009 solely on the strength of an executive notification establishing the Unique Identification Authority of India (UIDAI). Before the Act, Aadhaar enrolment rested on a Planning Commission notification dated 28 January 2009, an arrangement repeatedly challenged as lacking legislative authority. The Bill was introduced in the Lok Sabha by Finance Minister Arun Jaitley on 3 March 2016 and certified as a Money Bill under Article 110 of the Constitution, a classification that confined the Rajya Sabha to recommendatory powers and allowed the Lok Sabha to override its amendments. The Act received presidential assent on 25 March 2016 and was notified in stages. Its stated purpose, embedded in the long title, is the targeted delivery of subsidies, benefits and services for which expenditure is incurred from the Consolidated Fund of India.

The operative mechanics run through three statutory roles defined in the Act. An individual seeking enrolment submits demographic information — name, date of birth, address — and biometric information, defined under Section 2(g) as photograph, fingerprint and iris scan, with the explicit exclusion of race, religion, caste, tribe, language, income and medical history. UIDAI, constituted as a body corporate under Chapter II, generates the Aadhaar number after de-duplication, ensuring no resident holds two numbers. Section 7 permits the Central or State government to make receipt of a subsidy, benefit or service drawn from the Consolidated Fund conditional on Aadhaar authentication. Authentication itself, governed by Sections 4 and 8, occurs when a requesting entity submits an individual's number and biometric or demographic attributes to UIDAI's Central Identities Data Repository (CIDR), which returns only a positive or negative response — never the underlying biometric record.

The Act erected a privacy and security architecture in Chapter VI. Section 28 imposes a duty on UIDAI to secure identity information; Section 29 restricts sharing, barring disclosure of core biometric information and prohibiting its use for any purpose other than Aadhaar generation and authentication. Section 33 created the narrow exceptions: disclosure pursuant to a district judge's order, or — in the original text — on the direction of a Joint Secretary-rank officer in the interest of national security, subject to oversight. Penalties for impersonation, unauthorised access and data tampering appear in Chapter VII. Critically, Section 47 provided that only UIDAI, and not an aggrieved individual, could initiate prosecution for offences — a provision the Supreme Court later read down.

Implementation reshaped Indian administration across ministries and capitals. The Department of Financial Services pushed Aadhaar-seeding of bank accounts; the Ministry of Petroleum and Natural Gas routed LPG subsidies through the PAHAL (DBTL) scheme using Aadhaar-linked direct benefit transfers; and the Central Board of Direct Taxes, acting under Section 139AA of the Income Tax Act inserted by the Finance Act 2017, mandated Aadhaar–PAN linkage. By the late 2010s UIDAI had enrolled over 1.2 billion residents from its New Delhi headquarters, making it the largest biometric identity system in operation. The Aadhaar and Other Laws (Amendment) Act, 2019 subsequently introduced voluntary Aadhaar use for bank accounts and SIM cards through offline verification and a Virtual ID.

Aadhaar must be distinguished from adjacent identity instruments. Unlike a passport or a voter ID, an Aadhaar number is proof of identity, not of citizenship — Section 9 expressly states it confers no right to citizenship or domicile. It differs from the National Population Register, a citizenship-linked database under the Citizenship Act, and from PAN, which is tax-specific. The legislative device that carried it — the Money Bill route — is itself the sharpest point of contention, distinguishing the Aadhaar Act's passage from that of an ordinary bill requiring concurrent Rajya Sabha assent.

The decisive judicial intervention came in Justice K.S. Puttaswamy (Retd.) v. Union of India. A nine-judge bench in August 2017 recognised privacy as a fundamental right under Article 21, framing the test the scheme had to survive. On 26 September 2018 a five-judge constitution bench upheld the Act's constitutional validity and the Money Bill certification by majority, but struck down or read down several provisions: Section 57, which had allowed private companies to demand Aadhaar; Section 33(2)'s national-security disclosure clause; and Section 47's prosecution bar. The Court held Aadhaar mandatory for PAN and filing income-tax returns and for welfare under Section 7, but barred its compulsory imposition for bank accounts, mobile connections and school admissions. Justice D.Y. Chandrachud dissented, holding the Money Bill route a fraud on the Constitution.

For the working practitioner, the Aadhaar Act is the reference point for any debate on digital identity, welfare leakage and the proportionality standard now applied to data-driven governance. UPSC General Studies Paper II treats it under governance, transparency and the protection of vulnerable sections; policy researchers cite it as the template that informed the Digital Personal Data Protection Act, 2023 and inspired comparable digital-ID systems abroad. Recurring controversies — authentication failures denying rations to entitled beneficiaries, the still-pending review of the Money Bill question by a larger bench, and tension between deduplication and exclusion — keep the statute at the centre of India's contemporary debate over the balance between efficient service delivery and individual rights.