The Supreme Court has requested the Indian government to investigate claims regarding private companies accessing sensitive financial and employment data linked to income tax returns and provident fund records. This inquiry comes in response to a public interest litigation (PIL) alleging the emergence of a “commercial technological ecosystem” allowing such access.

During the hearing, the court expressed its concerns about the potential misuse of personal data by private entities. It directed the government to develop an appropriate approach to mitigate the issue, enlisting the expertise of domain specialists. The court suggested that the government form a response within four months to address the concerns raised.

While the court acknowledged the seriousness of the allegations, it did not find evidence that any specific company had unlawfully accessed data or that private firms have unrestricted access to ITR or EPFO records. Instead, it emphasised the need for a thorough examination of the situation.

Details of the Allegations Against Private Entities

The PIL alleges that private verification services are unlawfully accessing or commercially exploiting statutory financial information, particularly concerning EPFO and PAN-linked data. The petitioner pointed out that some entities have been advertising services that could access EPFO passbook details and other tax-related information.

Concerns were raised regarding the methods used by private organisations to obtain such information. Questions include whether adequate consent has been sought from individuals and if sufficient safeguards exist to maintain data integrity. Allegations also suggest that payment models might enable individuals to acquire sensitive data, although these claims remain unverified at this stage.

Determining the validity of these allegations is critical, as the government’s subsequent examination will unveil whether these private firms have indeed accessed sensitive information improperly and whether existing protocols are adequate to prevent such occurrences.

Understanding the Types of Data Involved

The ITR contains personal financial information submitted by taxpayers to the Income Tax Department, while Form 26AS and the Annual Information Statement encompass further details regarding an individual’s income and transactions. EPFO records pertain to the provident fund accounts of employees, with the Universal Account Number (UAN) serving as a link among different employment histories.

The PIL expresses concerns about the possibility of these sensitive records being misappropriated or misused by private entities without the individual’s knowledge or consent. This raises significant ethical questions regarding data privacy and the responsibilities of government systems.

As it stands, the Supreme Court’s ruling does not imply that private companies can access this data freely. Existing government databases implement specific protocols for access and authentication, aimed at safeguarding personal information from unauthorized retrieval.

Next Steps for the Government and Authorities

With the Supreme Court’s directive, the government and relevant authorities have been asked to assess the claims thoroughly and take necessary actions within a specified timeframe. Investigations will involve those responsible for maintaining the employment and tax data highlighted in the allegations.

This inquiry could clarify whether existing systems possess vulnerabilities and whether formal consent processes are adequately robust. The necessity for stringent safeguards against potential misuse of personal data has been underscored through this case.

Until the government addresses these critical issues, it is essential to refrain from assuming that private firms have unrestricted access to citizens’ sensitive ITR or EPFO records. The court’s order has opened an avenue for scrutiny regarding the potential commercial exploitation of such sensitive data, bringing attention to the issue of privacy rights in India.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store –  https://apps.apple.com/in/app/newspin/id6746449540 

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share