To provide a bit of reality check in relation to your answers:
1. This Govt. has, in a recent affidavit to the Supreme Court, claimed the Aadhaar database has never been hacked.
2. Other government agencies — including state governments and the National Informatics Centre have made Aadhaar details and data public, or accessible publicly.
In the case of the National Informatics Centre, supposed to be "the premier science & technology organisation of Government of India in informatics services and information and communication technology (ICT) applications" and is "a part of the Indian Ministry of Electronics and Information Technology's Department of Electronics & Information Technology", an API proxy to the Aadhaar eKYC service was made available on the public internet:
i. With an HTTP, not HTTPS, endpoint;
ii. With a single auth-token, used for all calls to this API proxy, embedded in an Android app the NIC put out;
iii. That was abused publicly by someone for their Android app providing access to "demographic data like name, address, phone number of individuals" without any authorization required.
3. There are no existing data privacy laws. There are no laws to punish, or even state what can be done, in situations of data breach.
4. The Govt. is just now in the beginning stages of forming data protection laws.
> 1. This Govt. has, in a recent affidavit to the Supreme Court, claimed the Aadhaar database has never been hacked.
> 2. Other government agencies — including state governments and the National Informatics Centre have made Aadhaar details and data public, or accessible publicly.
So that means the government has been truthful? As soon as they start lying we'll have the recourse of suing. Don't worry.
Ineptness of government agencies is there in everything. Trains run late and the bathrooms smell. Doesn't mean we need to shut it all down. We carry on and try our best to improve things. Laws will slowly but surely catch up. Enforcement will catch up. This is the only way we can progress.
I made no such assessments; I only laid out the facts as I found them. If you ask me for such an opinion, I'd call it technically correct and disingenuous; like claiming the left hand didn't steal what the right hand did, when the person themself is suspected of thievery.
> Laws will slowly but surely catch up. Enforcement will catch up.
Sure. But the mad rush to get everyone on the system by force should come strictly after these.
> Doesn't mean we need to shut it all down.
I did not call for anything in the slightest to this effect. I was merely laying out the facts.
1. This Govt. has, in a recent affidavit to the Supreme Court, claimed the Aadhaar database has never been hacked.
2. Other government agencies — including state governments and the National Informatics Centre have made Aadhaar details and data public, or accessible publicly.
In the case of the National Informatics Centre, supposed to be "the premier science & technology organisation of Government of India in informatics services and information and communication technology (ICT) applications" and is "a part of the Indian Ministry of Electronics and Information Technology's Department of Electronics & Information Technology", an API proxy to the Aadhaar eKYC service was made available on the public internet:
i. With an HTTP, not HTTPS, endpoint;
ii. With a single auth-token, used for all calls to this API proxy, embedded in an Android app the NIC put out;
iii. That was abused publicly by someone for their Android app providing access to "demographic data like name, address, phone number of individuals" without any authorization required.
3. There are no existing data privacy laws. There are no laws to punish, or even state what can be done, in situations of data breach.
4. The Govt. is just now in the beginning stages of forming data protection laws.