Wednesday, February 01, 2017

Your fingerprint is not your own! Meaning of privacy in India!



A website I often use made an offer recently – a free SIM that I could use for free for a couple of months. My wife was interested and we decided to try it. Everyone has heard of the well-known promotional offer by a cell phone company.

I filled in a form online, which said to keep the Aadhar card ready and wait for the delivery rider. He turned up in a day and asked if we had received an SMS message. We had and my wife brought her cell phone to read out that SMS. Meanwhile, the man pulled out a fingerprint reader. What was that for? He said that she should have her fingerprint recorded and that their system would get it verified. We said we did not wish to give the finger print as we were not confident that it would be safely handled. Instead we offered other ID and address proof and were willing to give a Xerox copy. The man said that would not be acceptable and we spoke to his supervisor about it over phone. The supervisor said that “this” was a government scheme and the alternative was not acceptable.

In that case, we said, we did not want the SIM!

The Aadhar card was devised by well-meaning people who had thought of various safeguards to avoid misuse. However, this is a country in which privacy means little. A person sharing a train ride could strike up a conversation with you and within minutes, ask you where you work and at what salary!
No wonder, anyone could walk in and have you give them your fingerprint to be used by some app on their cellphone! How does the customer know that the fingerprint will not be stored and used on a different occasion to “prove” his/her presence at some strange place? Does the law provide any safeguards? After all, the delivery man need not even be a staff member of the cell phone company, but be an agent hired on daily wages. You may not even learn his name or ask for his ID.

This poses major risks in a country in which over 25% of adults are illiterate.

We need researchers to find ways and means of making identification possible without any risk of abuse of the technology.