Bombay High Court Orders UIDAI to Share Aadhaar Data with Police in Fake Identity Probe

In a landmark ruling, the Bombay High Court has directed the Unique Identification Authority of India (UIDAI) to disclose an Afghan national's Aadhaar enrollment records to the police, enabling investigation into a sophisticated identity fraud case. The two-judge bench of Justices A.S. Gadkari and Kamal Khata invoked Section 33(1) of the Aadhaar Act, 2016, to override strict confidentiality provisions and emphasized the need for inter-agency coordination to combat border infiltration and document forgery.

The judgment, delivered on July 27, 2026, in Writ Petition No. 4406/2019, carries far-reaching implications for national security by laying down a framework for sharing identity data during criminal investigations.

The Case Background: A Web of Fraud and Forgery

The petitioner, the State of Maharashtra, through its Crime Intelligence Unit, had been investigating a case involving an Afghan national who systematically fabricated an Indian identity. The individual entered India on a tourist visa that expired in October 2018, then destroyed his original passport and assumed a false identity. With the help of co-accused, he obtained a forged PAN card, a School Leaving Certificate, and crucially, an Aadhaar card – using these documents to secure an Indian passport.

The investigating agency registered Crime No. 36/2019 at Vakola Police Station under multiple sections of the Indian Penal Code, the Passport Act, and the Foreigners Act, later transferred to the Crime Intelligence Unit. During the probe, the police realized that an Aadhaar card had been obtained through fraudulent submissions, and they needed the original enrollment documents from UIDAI to establish the true identity of the accused and trace the forgery chain.

The Legal Hurdle: Confidentiality vs. Investigation

UIDAI initially resisted sharing the data, citing the stringent confidentiality mandates under Sections 28 and 29 of the Aadhaar Act. Section 28(2) requires the Authority to ensure confidentiality of identity information, while Section 28(5) forbids officers from revealing any stored information. Section 29(2) goes further, prohibiting the sharing of core biometric information except as specified.

However, the judgment zeroed in on Section 33(1), which creates a critical exception: disclosure can be ordered by a court not inferior to a Judge of a High Court. The provision also mandates that the Authority and the Aadhaar number holder be given a hearing before such an order is passed.

National Security Concerns Take Center Stage

Additional Public Prosecutor J.P. Yagnik argued that this case was not an isolated incident but part of a dangerous pattern. He submitted that foreign nationals who illegally infiltrate India's borders systematically obtain forged Aadhaar cards to claim false Indian citizenship, and in some cases, engage in anti-national activities. He urged the court to invoke its writ jurisdiction under Article 226 to address systemic vulnerabilities and direct coordinated action across agencies.

"The availability of Aadhaar Cards obtained through fraudulent means creates cascading vulnerabilities across identity, immigration, and security systems," the court observed, echoing the State's concerns. The bench noted that "delay in these procedures, incorporated for the protection of Indian citizens, cannot and should not inure to the benefit of infiltrators."

Court's Legal Analysis: Weighing Confidentiality Against Public Interest

The court carefully construed the interplay between sections. It noted that Section 33(1) creates a limited exception to the confidentiality mandate for judicial proceedings, subject to oversight. While the proviso ordinarily requires a hearing to the Aadhaar holder, the bench decided to bypass this requirement given the nature of the case.

"In our view, Section 33(2) of the Aadhaar Act could have been invoked by the State as contemplated by the section since it concerns the national security of the country," the judges observed, referencing the national security exception that allows disclosure based on a Joint Secretary's direction. However, since the State had invoked Section 33(1), the court proceeded under that provision.

The court also cited the legal maxim salus populi est suprema lex "the welfare of the people is the supreme law" – to underscore the urgency of the matter.

Key Observations from the Judgment

The bench highlighted the gravity of the situation in its own words:

"This Court has observed a concerning pattern having come across with many cases wherein, foreign nationals have illegally infiltrated India's border and have fraudulently obtained basic documents to conceal their true identity and subsequently procured Aadhaar Cards to claim Indian identity."

"The continued stay of infiltrators causes several problems, as aforesaid, while speedy action may not be possible under the present mandated procedure. It is, therefore, imperative for the Respondent to carve out exceptions and abridge present procedures..."

" Time is of the essence and it is extremely important that investigations be completed within a stipulated period."

The Court's Decision: A Multi-Agency Directive

Allowing the petition, the court issued a comprehensive set of directions:

  • UIDAI must furnish photocopies of all documents submitted by the Afghan national during enrollment within two weeks.
  • The investigating agency can use this data to complete investigation and file a supplementary report.
  • Ministry of Home Affairs, Bureau of Immigration, FRRO, and State police are to verify citizenship status of all doubtful persons and initiate proceedings under the Foreigners Act, Passport Act, and Citizenship Act.
  • Immigration authorities must start deportation proceedings within four weeks and impose re-entry bans.
  • The accused's fraudulently obtained Indian passport, PAN card, Aadhaar card, and school certificate are to be impounded and cancelled.
  • UIDAI, in coordination with CBI and all State police , must collect and preserve biometric data and other particulars of the accused to prevent future identity fraud.
  • The court also recommended that the Central Government consider amending the Aadhaar Act to fast-track procedures in cases of border infiltration and national security.

The bench clarified that the data provided must be maintained securely and not disclosed except as permitted by the Aadhaar Act or court orders.

Implications for National Security and Legal Practice

This judgment establishes a clear framework for courts to order disclosure of Aadhaar data in criminal investigations involving identity fraud, especially where national security is at stake. It underscores the principle that confidentiality provisions cannot be used as a shield by those who exploit them to commit fraud.

The ruling also sends a strong signal to investigating agencies that the judiciary is willing to use its constitutional powers to cut through procedural bottlenecks in urgent cases. By bringing multiple agencies together under a single order, the Bombay High Court has set a precedent for coordinated action against the growing problem of border infiltration through fraudulent documentation.

The petition was allowed in the terms specified, with Rule made returnable forthwith and disposed of finally.