India Aadhaar Mandatory Linking: Biometric ID Required for Daily Life Services

India expanded mandatory Aadhaar biometric identity linking to an increasing range of services including banking, mobile phone accounts, tax filing, government benefits, and education enrollment, creating a comprehensive surveillance-capable identity infrastructure. Despite a Supreme Court ruling that Aadhaar cannot be made mandatory for private services, government directives effectively required Aadhaar for most essential services. The system collects fingerprints and iris scans from over 1.4 billion residents, creating the world's largest biometric database. Privacy advocates raised concerns about authentication logs creating comprehensive activity profiles showing when and where individuals access services. The biometric database has faced multiple security incidents, including demonstrations of unauthorized access and the large-scale breach linked to ICMR. Critics argue that mandatory biometric identity creates disproportionate surveillance infrastructure, disproportionately affects marginalized populations who may have difficulty with biometric enrollment, and creates a single point of failure for identity fraud when biometric data is compromised.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.