NDCR Bill Ignites Federalism Row: States, Civil Society Challenge Centralised Digital ID Mandate

New Delhi — A proposed legislative push by the Union Government to establish a sweeping National Digital Citizen Registry (NDCR) has ignited a fierce political firestorm, drawing sharp criticism from several state governments, civil society organisations, and privacy advocates who argue it infringes upon federal principles, personal liberties, and risks data security on an unprecedented scale.

The contentious bill, reportedly in its final drafting stages, aims to create a singular, mandatory digital identity for every Indian citizen, consolidating existing identification databases and linking them to various government services and private sector transactions.

Sources within the Ministry of Electronics and Information Technology (MeitY) indicate the NDCR Bill is envisioned as a ‘next-generation’ framework to streamline governance, enhance service delivery, and combat financial fraud.

However, its perceived centralising tendencies and the sheer magnitude of data proposed for collection have sent alarm bells ringing across the political spectrum and among rights groups, setting the stage for a significant showdown over data sovereignty and federal autonomy.

Key points

* The proposed National Digital Citizen Registry (NDCR) Bill seeks to create a single, mandatory digital identity for all Indian citizens, consolidating multiple databases.

* State governments, particularly those led by opposition parties, are protesting the bill, citing concerns over federal overreach, state autonomy, and resource allocation.

* Civil society organisations and privacy advocates warn of severe data security risks, potential for surveillance, and exclusion of vulnerable populations lacking digital literacy or access.

* The financial implications for states, tasked with implementing the massive project, are also a major point of contention, with demands for clearer funding mechanisms.

* The debate highlights India's ongoing struggle to balance technological advancement and governance efficiency with fundamental rights and the complexities of its federal structure.

Reported details suggest that the NDCR will not only encompass biometric data similar to Aadhaar but will also integrate birth records, educational qualifications, property details, health records, and potentially financial transaction history.

This extensive data aggregation, proponents argue, will create a seamless governance ecosystem, allowing for more efficient delivery of subsidies, improved tax collection, and better law enforcement. "The NDCR is a natural evolution in our journey towards a truly digital India," stated Mr.

Sanjay Kumar Singh, Additional Secretary, MeitY, during an internal briefing. "It will eliminate duplication, reduce red tape, and ensure that government benefits reach the rightful beneficiaries without leakage.

This is about efficiency and transparency, not control."

However, critics are quick to point out that the centralisation of such a vast repository of sensitive personal information creates a single point of failure, making it an irresistible target for cyberattacks. "Imagine a scenario where the NDCR database is breached.

The scale of identity theft and personal data compromise would be catastrophic, unprecedented in human history," warned Ms.

Rohini Prasad, a senior legal counsel specialising in data privacy and founder of the Digital Rights Foundation of India. "The current drafts do not offer robust enough data protection frameworks to mitigate such risks, let alone address concerns about potential state surveillance."

Several state Chief Ministers have already voiced their strong disapproval.

Mr.

K.

Chandrashekar Rao, Chief Minister of Telangana, articulated his concerns during a recent press conference in Hyderabad. "This proposed NDCR is an blatant assault on the federal structure of our Constitution.

The Union Government is attempting to usurp powers that rightfully belong to the states.

Who will bear the cost of this mammoth exercise?

How will the Centre ensure that the specific needs and linguistic diversity of our populace are adequately addressed without imposing a one-size-fits-all solution?

We will resist any move that centralises power and marginalises the states." His sentiments were echoed by Chief Ministers from Kerala, West Bengal, and Punjab, indicating a growing chorus of dissent.

The estimated cost of establishing and maintaining the NDCR infrastructure is projected to run into thousands of crores of rupees, a burden that states fear will disproportionately fall on their already strained treasuries.

While the Centre has indicated a phased implementation with shared funding, precise details remain elusive, further fueling state anxieties.

Data from the Comptroller and Auditor General (CAG) reports often highlight significant cost overruns and implementation challenges in large-scale digital projects, raising questions about the financial prudence and technical feasibility of the NDCR on such a scale.

Background

India has a complex history with digital identity projects.

The Aadhaar project, launched in 2009, provided a 12-digit unique identification number to residents, primarily using biometric data.

While Aadhaar was instrumental in streamlining subsidy delivery and financial inclusion, it also faced numerous legal challenges regarding privacy and its mandatory nature.

The Supreme Court's landmark Puttaswamy judgment in 2017 affirmed privacy as a fundamental right, leading to the eventual enactment of the Digital Personal Data Protection Act, 2023.

However, even with this Act, civil society groups argue that the NDCR’s expansive scope goes far beyond the existing privacy safeguards, potentially creating a surveillance state.

The debate also resurrects long-standing tensions between the Union and state governments over fiscal federalism and the division of legislative powers, particularly in areas concerning technology and citizen data, which are often shared subjects or fall into grey areas.

What it means

The NDCR Bill, if passed in its current form, could fundamentally reshape the relationship between the Indian state and its citizens.

For the government, it promises unparalleled administrative efficiency and a data-rich environment for policy formulation.

For citizens, however, it presents a Faustian bargain: convenience and access to services at the potential cost of personal autonomy, privacy, and increased vulnerability to data breaches.

The mandatory nature of the NDCR could also lead to the exclusion of millions of digitally illiterate or geographically remote individuals, particularly women, the elderly, and tribal communities, from essential services, exacerbating existing inequalities.

Furthermore, the pushback from states indicates a deepening political fissure, potentially leading to increased confrontation between the Centre and non-BJP ruled states, further straining cooperative federalism.

Reactions

Reactions to the NDCR Bill have been swift and sharply divided.

Opposition parties have framed it as a move towards an 'authoritarian surveillance state' and a violation of the spirit of federalism.

Ms.

Priyanka Chaturvedi, a Member of Parliament from the Shiv Sena (UBT), stated, "This government is systematically dismantling every democratic check and balance.

The NDCR is not about governance; it's about control.

We will fight this tooth and nail in Parliament and outside." Legal experts, including retired Supreme Court Justice Deepak Verma, have expressed concerns about the constitutional validity of certain provisions. "While the state has a legitimate interest in efficient administration, it cannot be at the expense of fundamental rights.

The scope of data collection and its potential misuse need rigorous judicial scrutiny," Justice Verma commented in a recent interview.

Conversely, industry bodies like the NASSCOM have cautiously welcomed the initiative, highlighting the potential for innovation in digital service delivery, provided robust data protection and cybersecurity measures are in place. "A unified digital identity could catalyse growth in the digital economy and foster greater trust in online transactions, but the trust factor is paramount," said Mr.

Rajesh Nambiar, President of NASSCOM.

Technology policy think tanks, however, remain divided, with some advocating for decentralised identity solutions as an alternative to mitigate risks.

What happens next

The NDCR Bill is expected to be introduced in the upcoming session of Parliament, where it is anticipated to face significant resistance from the opposition benches.

Parliamentary standing committees are likely to scrutinise the bill, opening avenues for public consultation and expert testimony, though the extent to which these inputs will influence the final draft remains to be seen.

Civil society organisations are gearing up for extensive public awareness campaigns and potential legal challenges, should the bill proceed without substantial amendments addressing their concerns.

The Union Government, for its part, is likely to launch a comprehensive public relations offensive to assuage fears and highlight the perceived benefits of the NDCR.

The debate promises to be a defining moment for India’s digital future and its federal democracy, with profound implications for citizen rights and state autonomy.