Kerala High Court Questions Mandatory Aadhaar for Digi Yatra

The landscape of digital infrastructure in India’s aviation sector faces a significant legal hurdle as the Kerala High Court has expressed serious reservations regarding the mandatory requirement of Aadhaar for registration on the 'Digi Yatra' platform. In a development that reverberates through the domains of data privacy and administrative law, a Division Bench comprising Chief Justice Soumen Sen and Justice Syam Kumar V.M. remarked that Aadhaar should not be made compulsory if a passenger can verify their identity using other government-issued documents.

This observation, made during the hearing of a public interest litigation (PIL) filed by C R Neelakandan, underscores a growing judicial focus on the nuances of data collection, consent, and the proportionality of state-mandated digital identification. As India navigates the integration of the Digital Personal Data Protection Act (DPDP) into every facet of public service, this legal intervention serves as a clarion call for the government to reassess the necessity of biometrics for entry into voluntary, efficiency-oriented platforms.

Background: The Contentious Nature of Digi Yatra

Digi Yatra was launched as an ambitious, technology-driven initiative by the Ministry of Civil Aviation to provide a seamless, contactless, and paperless experience for travelers at Indian airports. By utilizing facial recognition and biometric identification, users are meant to skip long queues and expedite the boarding process. However, for many privacy advocates, the convenience promised by the platform comes at the cost of sensitive personal data—specifically biometric information—that is stored, processed, and potentially shared across connected entities.

The petition brought by C R Neelakandan challenged the security protocols of this digital interface, arguing that the system fails to adequately align with the standards set out in the Digital Personal Data Protection Act, 2023 . At its core, the petition sought to restrict airport operators and their commercial partners from exploiting passenger data or sharing it with third parties without high levels of transparency and authorization.

The Judicial Stance: Invoking the Puttaswamy Precedent

The heart of the High Court’s intervention lies in their reliance on the landmark Supreme Court ruling in K.S. Puttaswamy v. Union of India . In Puttaswamy , the apex court recognized the individual’s right to privacy as a fundamental right under the Indian Constitution. More importantly, it established rigorous tests for when the state can infringe upon that privacy, requiring that such intrusions be backed by law, serve a legitimate aim, and be proportional to that aim.

During the proceedings, Chief Justice Soumen Sen left little ambiguity regarding the Court's view on the Aadhaar mandate: "As per Puttaswamy , this (using Aadhaar for registering on Digi Yatra) cannot be compulsory. You cannot insist on this." The Bench emphasized that the constitutional protection afforded to citizens against compelled identification extends to the digital realm. The core principle championed by the Judges is one of proportionality : if the objective is passenger identity verification, there are less intrusive, traditional methods—such as a passport or voter ID—that serve the function without requiring the sensitive, immutable biometric data tied to one’s Aadhaar credential.

The Argument of Voluntariness vs. Systemic Barriers

Appearing for the Union government and the Airports Authority of India (AAI), Additional Solicitor General of India (ASGI) ARL Sundaresan consistently maintained that Digi Yatra is a voluntary facility. The defense argument rested on the premise that passengers are not compelled to use the platform; it is a service offered to those who choose to opt in for the sake of efficiency and convenience. The ASGI further assured the Court that the biometric and identity data collected remain localized within the Digi Yatra ecosystem and are purged once the passenger’s journey is concluded.

However, the Court cut through the "voluntary" narrative with a sharp, practical critique. Chief Justice Sen noted that, historically, air travel has existed perfectly well without biometrics. "But if I go and buy a ticket from the counter, I don't need Aadhaar... That cannot be a reason," the Chief Justice observed. The Bench held the view that simply because a platform utilizes modern technology, it does not grant the state an unfettered mandate to extract deeper forms of personal identification than are required for traditional air travel. The logic is clear: the right to engage in air travel should not be conditioned on a trade-off that forces the surrender of biometric privacy.

Legal and Practical Implications for Legal Practitioners

For legal professionals and stakeholders involved in the intersection of law and technology, this case signals a shift towards stricter scrutiny of state-led digital projects. The Kerala High Court ’s current " prima facie " stand is more than just a matter of procedural convenience; it is a question of constitutional compliance.

  1. The Proportionality Test: The Court’s inquiry reminds counsel that "voluntary" is a relative term. If a government platform becomes the industry standard for access or efficiency, the "choice" to opt-out is often illusory. Lawyers must be prepared to argue about the necessity of the least intrusive means of verification under the DPDP framework.

  2. Data Minimization : Under the emerging data protection regime, collectors must justify why a specific data point (Aadhaar/Biometrics) is essential. The Court’s order directing the Digi Yatra Foundation to apprise it of alternative ID verification methods reflects a strict application of the " data minimization " principle.

  3. The DPDP Act 2023: As the rules under the DPDP Act 2023 continue to evolve, cases like this will set the tone for how courts interpret " statutory obligation " versus " coerced voluntary consent ."

Conclusion: A New Frontier for Digital Governance

The adjournment of the matter for two weeks , with the direction that the Respondents report back on the viability of accepting alternative identity proofs, suggests that the judiciary is unlikely to let the current system remain unchallenged. This is a critical juncture for both the aviation industry and the government’s digital identity initiatives.

As legal professionals, the takeaway is clear: the mandate for "digital transformation" does not override constitutional protections. When the state asks for data, the burden of proving that such data is indispensable remains high. The Kerala High Court has once again signaled that while technology continues to evolve, the fundamental protections afforded by the Constitution—and specifically the right to privacy—remain static and non-negotiable. Whether this case leads to a fundamental shift in how India handles state-backed digital identification, or remains a localized battle over airport convenience, it stands as a testament to the power of judicial oversight in a nascent digital regulatory environment.