Today's Headlines

1. Govt makes Aadhaar biometric authentication mandatory for subsidised LPG refills from October 1

Source: ET Government | Read Original →

The government has mandated Aadhaar biometric authentication for consumers receiving subsidised LPG refills, effective October 1. This new requirement allows for biometric verification at various touchpoints, including during delivery, at distributor showrooms, or through OMC mobile apps. For businesses, this significantly impacts LPG distributors and Oil Marketing Companies (OMCs), elevating their responsibilities as Data Fiduciaries handling sensitive personal data.

---

DPDP Impact Analysis

This recent government mandate for Aadhaar biometric authentication for subsidised LPG refills marks a critical development for Indian businesses, particularly those operating in public utility sectors. LPG distributors and Oil Marketing Companies (OMCs) will now be directly responsible for processing sensitive personal data—specifically, biometric information—of millions of consumers. This places them squarely in the role of Data Fiduciaries under the DPDP Act 2023, with a significantly heightened compliance burden.

The requirement to collect and verify biometric data necessitates a robust data governance framework. Businesses must ensure that their systems for data collection, storage, and processing adhere strictly to DPDP principles, including purpose limitation and data minimisation. They must implement advanced security safeguards to protect this sensitive information from unauthorised access, breaches, or misuse. Any lapse in security could lead to substantial penalties under the DPDP Act, potentially up to ₹250 Cr for significant data breaches, in addition to severe reputational damage.

Furthermore, these entities must be prepared to uphold the rights of data principals, ensuring transparency around data processing and providing mechanisms for individuals to exercise their rights regarding their personal data. This includes clear communication about how biometric data will be used, stored, and secured. The move highlights the broader trend of government-mandated data processing requirements that directly impact private sector operations, urging all businesses dealing with large-scale personal data to thoroughly review and enhance their DPDP compliance posture, especially concerning sensitive personal information.

---

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.