New Delhi: The DigiYatra system, introduced to streamline passenger movement and reduce congestion at major airports across India, is now facing serious scrutiny over the security and privacy of biometric data collected under the platform. A parliamentary standing committee on transport, tourism, and culture has raised significant concerns regarding the handling of sensitive personal data within the digital identity system.
In its recent report, the committee highlighted that biometric data used in DigiYatra—particularly facial recognition information—falls under highly sensitive personal data categories and therefore requires strict safeguards and continuous monitoring. Despite the large-scale collection and usage of such data, the committee noted that no comprehensive independent audit has been conducted so far, marking what it described as a major gap in oversight.
FCRF Launches Premier CISO Certification Amid Rising Demand for Cybersecurity Leadership
According to the report, more than 2 million passengers are currently registered on the DigiYatra app, and the system is actively operational across nearly 30 airports in the country. The platform enables automated passenger identification, significantly reducing the time required for check-in and security verification processes. However, the growing reliance on biometric technology has also raised concerns about potential risks associated with data security and privacy breaches.
The committee emphasized that transparency and accountability are critical components of any digital identity infrastructure. It expressed concern that there is insufficient clarity on how data is collected, stored, processed, and under what conditions it may be accessed or shared. The absence of a clear, independently verified assessment of these processes was identified as a serious shortcoming.
The parliamentary panel has recommended that the concerned ministry immediately commission an independent audit by a specialized and neutral agency to evaluate the DigiYatra system. This review should include an assessment of user consent mechanisms, data storage policies, retention timelines, and the potential risks of data breaches or misuse. It also suggested a detailed examination of the operational framework of the DigiYatra Foundation.
The report further noted that DigiYatra has been used more than 86 million times so far, reflecting its rapid adoption and growing role in India’s aviation ecosystem. While this indicates strong user acceptance and operational scale, it also underscores the magnitude of sensitive data being processed, which could pose significant security challenges if not properly safeguarded.
The committee also sought clarity on whether the system has delivered measurable improvements in passenger processing time, as originally intended. Although DigiYatra was designed to enhance efficiency and reduce waiting times at airports, the lack of publicly available, verifiable performance data has raised questions about its actual impact.
Experts believe that biometric data represents one of the most sensitive forms of digital identity, and any misuse or breach could have severe consequences for individuals. They stress that robust cybersecurity frameworks, strict compliance standards, and regular independent audits are essential to ensure the safety of such systems.
The issue has placed policymakers at a critical crossroads, where they must balance technological convenience with the fundamental right to privacy. While systems like DigiYatra are widely seen as part of the future of air travel, their long-term success will depend heavily on building public trust through transparency and strong data protection mechanisms.
Following the committee’s recommendations, there is growing expectation that the government may soon initiate an independent review and strengthen oversight measures for the system. If implemented, such steps could not only improve the credibility of DigiYatra but also enhance passenger confidence in digital travel infrastructure.
Going forward, the key question remains whether the concerns raised by the parliamentary panel will lead to concrete reforms and whether DigiYatra can evolve into a truly secure and trusted model for digital travel identity management.
