Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act 2016

Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act 2016 furnishes a statutory foundation for India’s 12‑digit unique identification number, linking it directly to the delivery of welfare subsidies, pensions, scholarships and a growing suite of public services. By mandating that benefits be disbursed only after electronic authentication of an individual’s Aadhaar, the Act transforms a massive, paper‑based entitlement system into a digitally traceable, fraud‑resistant architecture, positioning India at the forefront of large‑scale biometric governance.

Legislative Genesis and Constitutional Context

The bill was introduced in Parliament on 28 February 2016, passed by both houses on 11 March 2016, and received presidential assent on 12 March 2016. It was subsequently notified on 12 July 2016, bringing the law into force. The Act rests on Article 21 of the Constitution, which guarantees the right to life and personal liberty, and on the Directive Principles that call for the equitable distribution of resources. Its passage followed the Supreme Court’s 2015 judgment in Justice K.S. Puttaswamy v. Union of India, which affirmed the constitutional validity of a unique identity system while insisting on procedural safeguards for privacy.

Core Mechanisms and Technical Architecture

Under Section 3, the Unique Identification Authority of India (UIDAI) issues an Aadhaar number after capturing demographic data and two biometric modalities—fingerprints and iris scans. Section 7 authorises “authentication” whereby a service provider submits a one‑time password (OTP) and a biometric match to UIDAI’s central repository, achieving a 99.9 % match accuracy as reported by the Ministry of Electronics and Information Technology in 2022. The Act also permits “offline authentication” for remote areas, using a cryptographic hash stored on a secure micro‑SD card, a provision first deployed in the Pradhan Mantri Jan Dhan Yojana in 2018.

Key Provisions of the Act

Section 8 obliges any central or state agency to use Aadhaar for the “targeted delivery of financial and other subsidies, benefits and services,” thereby linking over 1.42 billion enrolments to schemes such as the Public Distribution System, Mahatma Gandhi National Rural Employment Guarantee Act, and the National Pension Scheme. Section 12 prescribes a civil penalty of up to ₹5 lakh for wrongful disclosure of Aadhaar data, while Section 13 imposes imprisonment of up to three years for offences like fraudulent authentication. Section 14 empowers the central government to frame detailed rules, leading to the Aadhaar (Authentication) Regulations 2020, which introduced “virtual ID” numbers to enhance privacy.

Implementation and Current Status

By March 2024, UIDAI reported more than 1.35 billion successful authentications per month, averaging 45 million daily transactions across banking, telecom and e‑governance portals. The Direct Benefit Transfer (DBT) portal, launched in 2017, now routes roughly 85 % of central subsidies through Aadhaar‑linked accounts, cutting leakages in the LPG subsidy scheme from an estimated 30 % in 2015 to under 5 % in 2023. A dedicated Beneficiary Authentication and Database Rationalisation portal, unveiled in 2022, consolidates multiple state‑level databases, enabling real‑time verification for over 200 million beneficiaries.

Significance and Controversies

The Act’s most profound impact lies in its ability to convert a fragmented welfare landscape into a unified, data‑driven ecosystem, delivering savings of an estimated ₹12,000 crore annually in reduced fraud, according to the Comptroller and Auditor General’s 2021 report. Nonetheless, the legislation has sparked vigorous debate over privacy, especially after the Supreme Court’s 2018 “Special Intensive Revision” (SIR) exercise struck down Section 57, which had required private entities to collect Aadhaar. Civil‑society coalitions continue to press for stronger data‑protection clauses, while the government argues that the Act’s safeguards—mandatory encryption, limited data sharing, and audit trails—strike an appropriate balance between efficiency and individual rights.