The Indian government has blocked several websites that were exposing sensitive personal identifiable information (PII), including Aadhaar and PAN card details of citizens. The Ministry of Electronics and Information Technology (MeitY) took this action after receiving information that certain portals were compromising individuals’ sensitive data.
The Unique Identification Authority of India (UIDAI) filed a complaint with police authorities, citing violations of Section 29(4) of the Aadhaar Act, 2016, which prohibits the public display of Aadhaar information.
Also Read: ED Seizes Assets Of YouTuber Elvish Yadav And Singer Rahul Yadav In Wildlife Crime Case
An analysis conducted by the Indian Computer Emergency Response Team (CERT-In) identified security flaws in these websites. In response, the owners of the affected sites received guidance on necessary actions to enhance their ICT infrastructures and fix identified vulnerabilities.
CERT-In has issued comprehensive guidelines for all entities using IT applications, as well as directions under the Information Technology Act, 2000 (IT Act) regarding information security practices, procedures, prevention, and reporting of cyber incidents. The IT Act mandates non-publication and non-disclosure of sensitive personal data, and any affected individual can approach an Adjudicating Officer under Section 46 of the IT Act to file a complaint and seek compensation. The IT Secretaries of the States are designated as Adjudicating Officers under this act.
Furthermore, the ministry noted that it has enacted the Digital Personal Data Protection Act, 2023, and is currently drafting the rules.
To promote responsible data usage and prevent unnecessary exposure, the government has also initiated a program aimed at raising nationwide awareness among diverse stakeholders.
