Audit Report of CAG on the Functioning of the UIDAI | 08 Apr 2022

Why in News?

Recently, the Comptroller and Auditor General (CAG) of India, has pulled up the Unique Identification Authority of India (UIDAI) over a range of issues related to the issuance of Aadhaar cards.

• The findings are part of the first performance review by the country’s independent auditor of UIDAI, which was carried out over a four-year period between FY2015 and FY2019.

What are the Issues Highlighted by CAG?

• No Documents for Proof of Residency:
  • UIDAI has not prescribed any specific proof/document or process for confirming whether an applicant has resided in India for the specified period, and takes confirmation of the residential status through a casual self-declaration from the applicant.
  • Also, there was no system in place to check the affirmations of the applicant.
    • In India, Aadhaar numbers are only issued to individuals who have resided for a period of 182 days or more in the 12 months before the date of application.
• De-duplication Problem:
  • According to the CAG report, the UIDAI had to cancel more than 4,75,000 Aadhaars (as of November 2019) for “being duplicate”.
  • This data indicates that on average no less than 145 Aadhaars generated in a day during the period of nine years since 2010 were duplicate numbers requiring cancellation.
    • The purpose of the Aadhaar system is that it is unique – that is, no individual can obtain two Aadhaar numbers, and that a specific person’s biometrics cannot be used to obtain Aadhaar numbers for different people.
• Faulty Enrolment Process:
  • UIDAI appeared to have charged people for biometric updates when poor quality data was fed in during enrolment.
  • UIDAI did not take responsibility for poor quality biometrics and put the onus on the resident and charged fees for it.
• Matching Aadhaar Numbers to their Actual Documents:
  • All the Aadhaar numbers stored in the UIDAI database were not supported with documents on the demographic information of the resident.
  • It “caused doubts about the correctness and completeness of resident’s data collected and stored by UIDAI prior to 2016”.
• Children Below the Age of Five:
  • The audit was also critical of UIDAI’s move to issue Aadhaar cards to children and newborns without biometrics under an initiative known as Bal Aadhaar.
  • This needs to be reviewed because anyway after 5 years, a child has to apply for new regular Aadhar. The unique identity is not matched anyway because it is issued on the basis of documents of parents.
  • Apart from being violative of the statutory provisions, the UIDAI has also incurred avoidable expenditure of Rs 310 crore on the issue of Bal Aadhaars till 31^st March 2019.
    • In Phase- II of ICT assistance a further sum of Rs 288.11 crore was released up to the year 2020-21 to states/schools primarily for the issuance of Aadhaars to minor children.

What are the Recommendations?

• Prescribe a Procedure for Self Declaration:
  • UIDAI may prescribe a procedure and required documentation other than self-declaration, in order to confirm and authenticate the residence status of applicants, in line with the provisions of the Aadhaar Act.
• Tighten the SLA parameters of Biometric Service Providers (BSPs):
  • UIDAI may tighten the Service Level Agreement (SLA) parameters of Biometric Service Providers (BSPs), devise foolproof mechanisms for capturing unique biometric data and improve upon their monitoring systems to proactively identify and take action to minimize, multiple/ duplicate Aadhaar numbers generated.
• Explore Alternate Ways to Capture Uniqueness of Biometric Identity for Minor:
  • UIDAI may explore alternate ways to capture uniqueness of biometric identity for minor children below five years since uniqueness of identity is the most distinctive feature of Aadhaar established through biometrics of the individual.
• Proactive Steps to Identify and Fill the Missing Documents:
  • UIDAI may take proactive steps to identify and fill the missing documents in their database at the earliest, in order to avoid any legal complications or inconvenience to holders of Aadhaar issued prior to 2016.
• Review Charging of Fees for Voluntary Update:
  • UIDAI may review charging of fees for voluntary update of residents’ biometrics, since they (UIDAI) were not in a position to identify reasons for biometric failures and residents were not at fault for capture of poor quality of biometrics.
• Conduct thorough Verification of the Documents:
  • UIDAI may conduct thorough verification of the documents, infrastructure, and technological support claimed to be available, before on-boarding the entities (Requesting Entities and Authentication Service Agencies) in the Aadhaar ecosystem.
• Frame a Suitable Data Archival Policy:
  • UIDAI may frame a suitable data archival policy to mitigate the risk of vulnerability to data protection and reduce saturation of valuable data space due to redundant and unwanted data, by continuous weeding out of unwanted data.

Source: IE