UIDAI Shares Non-Personal Anonymised Data: What Are Its Risks?

The Indian government’s release of supposedly anonymized Aadhaar data raises serious privacy concerns because current technical methods cannot guarantee irreversible anonymity. Experts warn that aggregated insights, when combined with other public datasets, can easily be triangulated to re-identify individuals or target specific minority groups. This highlights the inherent risk of re-identification, suggesting that the data shared is effectively personal data despite claims to the contrary, thereby threatening public trust and individual safety. This move occurs within a significant regulatory vacuum, as India’s existing data protection laws do not govern non-personal data. Unlike comprehensive frameworks in other jurisdictions, there is no dedicated authority to oversee data custodians or enforce strict governance standards for these datasets. Consequently, the lack of legal guardrails means that sharing sensitive derived data—potentially linking welfare or financial activities to demographics—poses risks of collective harm without adequate accountability or oversight mechanisms in place. The situation is particularly relevant to open data advocacy as it illustrates the critical need for robust governance frameworks before releasing government datasets. It demonstrates how premature data sharing can undermine privacy rights and erode trust in open government initiatives. True open data practices require not just transparency, but also rigorous technical safeguards and legal structures that prevent deanonymization, ensuring that openness does not come at the cost of individual security and civil liberties.

Source: medianama.com
Published on 2025-06-12

UIDAI Shares Non-Personal Anonymised Data: What Are Its Risks?

Related news