Introduction:

In State of Gujarat v. Unique Identification Authority of India & Ors., Criminal Application No. 6051 of 2023, the Gujarat High Court has passed a significant order clarifying the scope of disclosure under the Aadhaar Act, 2016, by directing the Unique Identification Authority of India (UIDAI) to furnish Aadhaar details of five persons accused of serious offences including cheating, forgery, and criminal conspiracy. Justice Hasmukh D. Suthar issued this order in response to the State of Gujarat’s plea seeking disclosure of the Aadhaar information of the accused, who were alleged to be Bangladeshi nationals having forged Aadhaar and PAN cards. The case stems from an FIR registered at J.P. Road Police Station, Vadodara City, where the accused were alleged to have lured the complainant by promising to exchange Saudi Arabian Riyals against ₹15,000, but only handed over two 100 Riyal notes, thus committing cheating and criminal breach of trust. Investigations revealed the accused were suspected illegal immigrants from Bangladesh, and forged documents, including Aadhaar and PAN cards, were found in their possession, leading the State to approach the High Court under Section 33 of the Aadhaar Act after UIDAI declined to share the information citing statutory bars under Sections 28, 29, and 30. The case raised crucial questions on balancing the right to privacy under the Aadhaar Act with the necessity of disclosing identity information to ensure effective investigation of serious crimes involving forgery, impersonation, and national security concerns.

Arguments of the State (Petitioner):

The State of Gujarat, represented by the Public Prosecutor, argued that the accused persons were involved in a well-orchestrated cheating racket wherein they induced the complainant to part with ₹15,000 in exchange for 100 Riyal currency notes but handed over only two notes. During investigation, forged documents, including Aadhaar and PAN cards, were recovered, and it was suspected the accused were Bangladeshi nationals who had entered India illegally and prepared false Aadhaar identities to masquerade as Indian citizens. The State submitted that in view of Sections 406, 420, 467, 468, 471, 114, 120B of IPC and Sections 34 and 42 of the Aadhaar Act, 2016, registered in the FIR, it was essential to obtain Aadhaar information from UIDAI to verify the identities, detect further crimes, and complete the investigation effectively. The State highlighted that UIDAI had refused to share information citing bar under Sections 28, 29, and 30 of the Aadhaar Act, which protect the confidentiality of identity and authentication records, thereby leaving the investigation incomplete. Counsel emphasized that Section 33 of the Aadhaar Act provides a specific exception allowing disclosure of Aadhaar data pursuant to an order of a High Court Judge, which was precisely the purpose of filing the petition before the Gujarat High Court. The State argued that the need for disclosure was compelling as it related to crimes of cheating and forgery, and apprehension existed that the accused might have links with cross-border criminal networks, requiring urgent and complete information to ascertain their identities and origins. The State maintained that the investigative imperative outweighed privacy concerns in this case because the very authenticity of the accused’s Aadhaar identities was in question, and verification from UIDAI was indispensable to determine whether the Aadhaar cards were genuine or forged, especially considering the national security implications if foreign nationals had unlawfully acquired Aadhaar credentials.

Arguments of UIDAI (Respondent):

On behalf of the UIDAI, counsel argued that Sections 28, 29, and 30 of the Aadhaar Act, 2016, create an explicit statutory bar on sharing or disclosing identity information or authentication records to anyone, including investigative agencies, to safeguard the fundamental right to privacy recognized under Article 21 of the Constitution. The UIDAI contended that these provisions are designed to protect sensitive personal information and maintain the security and confidentiality of data collected under the Aadhaar enrollment process. The counsel maintained that UIDAI could not suo motu share information with any state or central agency unless permitted by law and that the only statutory exception is provided under Section 33 of the Aadhaar Act, which allows disclosure pursuant to an order of a court not inferior to a High Court judge. UIDAI argued that it had not acted arbitrarily or in breach of its duties but had correctly advised the investigating agency that information could only be disclosed on the basis of a High Court order. The counsel submitted that UIDAI remained committed to assisting law enforcement within the legal framework but stressed the importance of judicial oversight to prevent misuse or unwarranted disclosure of personal identity information, which could set a dangerous precedent undermining the privacy protections enshrined in the Aadhaar Act. UIDAI took the stand that it had neither obstructed nor delayed the investigation but had only complied with the legal provisions designed to balance individual privacy rights with state interests in criminal investigations.

Court’s Observations and Judgment:

Justice Hasmukh D. Suthar meticulously analyzed the statutory scheme of the Aadhaar Act, especially Sections 28, 29, 30, and the exception under Section 33. The Court noted that while the confidentiality of Aadhaar data is paramount and protected by law, Section 33 provides a clear exception authorizing the High Court to order disclosure in cases requiring judicial scrutiny, especially when vital to a criminal investigation involving serious offences like cheating, forgery, and impersonation. The Court found merit in the State’s submission that the case involved allegations of forging government documents, misusing Aadhaar infrastructure, and potential illegal stay of foreign nationals, which together justified invoking Section 33. The Court observed that although UIDAI rightly cited the legal bar on routine disclosure, the statutory framework anticipated situations demanding judicial intervention for disclosure, and this case fit squarely within such circumstances. Referring to the complaint and the FIR details, the Court highlighted the compelling need for disclosure of identity and authentication records to establish the genuineness of the accused’s Aadhaar cards, essential for both identifying the real culprits and unearthing the truth. Justice Suthar acknowledged the importance of privacy but ruled that it cannot be used as a shield by accused persons who may have forged Aadhaar cards to conceal their real identities and nationalities, especially when allegations suggest they may not be Indian citizens. The judgment reaffirmed the High Court’s authority under Section 33 to direct disclosure when the interests of justice, investigation, and public order require it, balancing privacy concerns with the necessity of effective law enforcement. Consequently, the Court ordered UIDAI to provide the information sought by the investigating officer in connection with FIR I-C.R. No.22/2018, registered at J.P. Road Police Station, Vadodara City. The petition was disposed of with these directions, clarifying that the information must be shared strictly for investigation purposes, maintaining confidentiality beyond the scope of the case. The judgment marks a significant precedent in delineating the limits of privacy under the Aadhaar Act and upholding the primacy of judicial oversight in matters of sensitive data disclosure during criminal investigations.