Rajya Sabha MP Saket Gokhale has brought to light a concerning breach of privacy regarding the DigiYatra app, impacting over 3.3 million Indian users. Originally intended to facilitate seamless travel, the app is now embroiled in controversy following revelations that users” personal data has landed in the possession of a private company currently under investigation by the Enforcement Directorate (ED).
In a detailed post on X (formerly Twitter), the Trinamool Congress leader outlined the following:
The sudden termination of the DigiYatra app last month, prompting users to switch to an entirely new application rather than a simple update.
The disturbing revelation that DigiYatra had been operated by a private entity, Dataevolve, since 2021.
The CEO of Dataevolve being implicated in a money laundering case by the ED, raising serious concerns about the handling of sensitive user data.
DigiYatra”s deviation from expected protocol by being managed by Dataevolve instead of the DigiYatra Foundation, leading to breaches of established data security standards.
The subsequent launch of a new app to sever ties with Dataevolve, exacerbating worries regarding data ownership and security.
The alarming fact that personal data of 3.3 million Indian users now rests with Dataevolve, a company under investigation for alleged financial irregularities.
Dataevolve Solutions has developed the DigiYatra Central EcoSystem, a platform enabling the sharing of travel details with airports for verification purposes.
As DigiYatra transitions to a new app, cybersecurity experts have sounded the alarm, cautioning against the potential misuse of data given its reliance on Dataevolve”s infrastructure. DigiYatra Foundation, a not-for-profit entity owned by the Airports Authority of India and other private airports, operates outside the purview of the Right to Information Act.
Disha Verma, associate policy counsel at the Internet Freedom Foundation, told Economic Times that while partnered with Dataevolve, DigiYatra Foundation had access to sensitive citizen information such as facial biometrics and Aadhaar data. Despite repeated requests, the Foundation has failed to disclose its data security audits publicly and continues to withhold information as it reportedly disengages from the partnership.
Gokhale said that despite assurances from Civil Aviation Minister Jyotiraditya Scindia that enrollment would be voluntary, reports indicate coercion by private volunteers.
In view of these damning revelations, Gokhale has demanded the Civil Aviation Minister to issue immediate clarification on several critical issues:
The extent of user data transferred to the private entity Dataevolve operating DigiYatra .
The rationale behind DigiYatra being operated by a private company on their infrastructure rather than by the government.
The sudden discontinuation of the old DigiYatra app last month and the necessity for users to switch to a new app. Gokhale insists that the Modi government must address these concerns without delay.
