What's Aadhaar Data Vault, UIDAI's new system to store data?
What's the story
The Unique Identification Authority of India (UIDAI) has made it mandatory for all organizations dealing with Aadhaar data to store it in a secure digital system called the Aadhaar Data Vault (ADV). This includes banks, fintechs, and government agencies. The ADV is an encrypted storage system for sensitive information like Aadhaar numbers and eKYC XML files containing demographic details such as name, date of birth, address, email ID, and mobile number.
Security measures
What is the ADV and why is it necessary?
The Aadhaar Data Vault plays a crucial role in keeping Aadhaar data in one single, restricted-access repository. This prevents duplication across multiple databases and minimizes the risk of data breaches or identity theft. Under the Aadhaar Act, 2016, every Requesting Entity (RE) using Aadhaar for authentication or eKYC verification must set up a vault. This includes banks, NBFCs, telecom companies, fintech platforms and government departments.
Operational guidelines
Core features of the Aadhaar Data Vault
The UIDAI introduced the ADV to minimize Aadhaar's digital footprint and ensure strict control over access. Its core features include end-to-end encryption of Aadhaar numbers and linked data, audit trails to track every access attempt, and regulatory compliance for entities handling Aadhaar information. The authority has also laid down encryption standards, key management processes, and periodic security audits that all entities must follow.
Privacy assurance
How does the new system work?
Under the new system, each Aadhaar number stored by an organization is replaced by a unique reference key. The actual number remains encrypted inside the vault and cannot be viewed or extracted without authorization. This guarantees privacy even when data is used across multiple applications. UIDAI has clarified that Aadhaar PDFs or eKYC files cannot be stored locally and must remain within the vault for added security.