Aadhaar data breach report ‘incorrect’

Also Read

Karnataka: Confident group chairman CJ Roy shoots self at office during IT raid

1 hour ago

World Bank commits $8-10 bn annual financing in India over next 5 years

3 hours ago

New Delhi: The Unique Identification Authority of India (UIDAI) Thursday told the Delhi High Court that reports regarding security breach of data related to Aadhaar is incorrect and misleading as the strongest encryption technology has been used to store data which is impossible to decrypt.
“The technology used is 2048-bit encryption, which is the strongest one and it is impossible to decrypt and extract any information even if enrolment packets were accessible during transit to the UIDAI data centre,” UIDAI told a bench of Justice S Ravindra Bhat and Justice Prateek Jalan.
The bench was hearing a plea seeking exemplary damages for the losses caused due to leakage of Aadhaar data. The plea was filed by Shamnad Basheer alleging the dissemination of personal information of Aadhaar holders made it clear that the government is responsible for any breach of right to informational privacy.
In an affidavit, the government agency said that Aadhaar data is fully secured at all times and for further strengthening of security and privacy of data, security audits are conducted on regular basis, and all possible steps are taken to make the data safer and protected.
It further added there are multiple layers of security at physical level in UIDAI data centres and is being managed by armed Central Industrial Security Force (CISF) personnel round-the-clock.
“The technical architecture of Aadhaar has been structured in such a way, so as to ensure clear data verification, authentication and de-duplication, while ensuring a high level of privacy and information security,’’ the UIDAI said.
“UIDAI has taken all necessary safeguards, starting from providing standardised software that encrypts the entire data even before saving it to any disk; protecting data using tamper-proofing; identifying every operator in all and every enrolment; and identifying every one of the thousands of machines using an unique registration process, which ensures every encrypted data is tracked,’’ read the reply copy filed by the UIDAI.