GS Paper III · Science & Technology · Economy · GS Paper II · Governance
India Stack & Digital Public Infrastructure (DPI)
Complete UPSC notes — Aadhaar, UPI, DigiLocker, Account Aggregator, PMJDY, CoWIN, GeM, eVIN, India Stack, global DPI, challenges, PYQs and MCQs — all in one place.
🏗️
What is Digital Public Infrastructure (DPI)?
Definition · Analogy · Evolution · Why it matters for UPSC
Definition (World Bank / UN)
Digital Public Infrastructure (DPI) is a set of foundational, reusable digital systems and standards that multiple programmes and sectors can build upon. Just as physical infrastructure (roads, power grids, ports) enables economic activity, DPI enables digital-age economic and social activity. It lowers the cost of delivering services and widens access — for both government and private actors.
Simple Analogy — DPI = Digital Roads
Physical roads: anyone can drive on them (government buses, private cars, delivery trucks, ambulances).
DPI is the same: anyone can build services ON TOP of the digital rails (government welfare schemes, private fintech apps, hospitals, e-commerce).
Aadhaar = digital ID card | UPI = digital payment road | DigiLocker = digital document cabinet | Account Aggregator = digital data sharing highway
DPI is the same: anyone can build services ON TOP of the digital rails (government welfare schemes, private fintech apps, hospitals, e-commerce).
Aadhaar = digital ID card | UPI = digital payment road | DigiLocker = digital document cabinet | Account Aggregator = digital data sharing highway
🔓
Open & Reusable
DPI is built on open standards and open APIs — anyone (government or private) can build services on top. Not proprietary lock-in like private tech platforms.
🔗
Interoperable
Different systems talk to each other. A Paytm user can send money to a PhonePe user — this is interoperability enabled by UPI rails. Banks, apps, devices all connect.
🌍
Inclusive by Design
Designed to serve ALL citizens — rich and poor, urban and rural, literate and illiterate. DPI enables DBT, financial inclusion, healthcare access and welfare delivery at scale.
🔢
Three Core Layers of DPI
Digital Identity · Digital Payments · Data Exchange + Supporting platforms
🪪
Layer 1: Digital Identity
Aadhaar — 12-digit unique biometric ID. 138+ crore issued. Enables eKYC, DBT, authentication across services. Foundation of the entire DPI stack.
💸
Layer 2: Digital Payments
UPI — real-time interoperable payment rails. ₹27.28 lakh crore monthly (Oct 2025). AePS, IMPS, FASTag. Enables cashless economy at all income levels.
🔐
Layer 3: Data Exchange
Account Aggregator + DigiLocker + eKYC + Open APIs. Consent-based data sharing. Enables credit access, document verification, service delivery.
🇮🇳
India Stack — The World's Most Ambitious DPI
Four layers · Presenceless · Paperless · Cashless · Consent
What is India Stack?
India Stack is India's unified set of open APIs and digital infrastructure that allows governments, businesses, and developers to utilise a unique digital infrastructure to solve large-scale problems. It is often described as the world's most sophisticated digital public infrastructure. India Stack was conceptualised by iSPIRT (Indian Software Product Industry Round Table) and implemented through public institutions.
| Layer | Name | What It Enables | Key Technology |
|---|---|---|---|
| 1 (Base) | Presenceless Layer | Authenticate identity digitally — no need to be physically present. Open a bank account from home. | Aadhaar biometrics, OTP-based eKYC |
| 2 | Paperless Layer | All documents digital — no physical papers needed. Store, share, verify documents instantly. | DigiLocker, eSign, eKYC |
| 3 | Cashless Layer | Move money instantly without cash. Any bank-to-any bank in real time. ₹1 or ₹1 crore — same speed. | UPI, IMPS, AePS (Aadhaar-enabled Payment System) |
| 4 | Consent Layer | Share personal data with institutions only with explicit consent. Control what data, with whom, for how long. | Account Aggregator (AA) framework |
Mnemonic — India Stack's 4 Layers
P-P-C-C: Presenceless → Paperless → Cashless → Consent
Or think bottom-up: "Identity → Documents → Money → Data Control"
Or think bottom-up: "Identity → Documents → Money → Data Control"
⚙️
Key DPI Components — India's Ecosystem
Aadhaar · UPI · PMJDY · DigiLocker · Account Aggregator · CoWIN · GeM · FASTag · UMANG
🪪
Aadhaar — Digital Identity
What: 12-digit unique biometric digital identity (fingerprints + iris scans + photo) issued by UIDAI.
Scale: 138.34 crore Aadhaar numbers issued (mid-2024) — nearly every Indian adult.
Enables: eKYC (instant verification), DBT (welfare transfers), bank account opening, SIM card activation, income tax filing, subsidies, pension, MNREGA payments.
Legal basis: Aadhaar (Targeted Delivery of Financial & Other Subsidies, Benefits & Services) Act, 2016.
UPSC key point: SC in Puttaswamy judgment (2018) — Aadhaar constitutional but cannot be mandatory for private companies; right to privacy is fundamental right. Key Case
Scale: 138.34 crore Aadhaar numbers issued (mid-2024) — nearly every Indian adult.
Enables: eKYC (instant verification), DBT (welfare transfers), bank account opening, SIM card activation, income tax filing, subsidies, pension, MNREGA payments.
Legal basis: Aadhaar (Targeted Delivery of Financial & Other Subsidies, Benefits & Services) Act, 2016.
UPSC key point: SC in Puttaswamy judgment (2018) — Aadhaar constitutional but cannot be mandatory for private companies; right to privacy is fundamental right. Key Case
💸
UPI — Unified Payments Interface
What: Real-time, interoperable payment system. Send money between any two bank accounts using mobile. Built by NPCI (National Payments Corporation of India).
Scale: ₹27.28 lakh crore monthly transactions (Oct 2025). 20 lakh crore+ annual transactions. World's fastest-growing payment system.
Interoperability: Works across 400+ banks and all payment apps (PhonePe, Google Pay, Paytm, BHIM).
Use cases: Person-to-person, merchant payments, government tax payments, EMI, SIP investments.
Global: UPI live in Singapore, France, UAE, UK, USA, Australia, Nepal. G20 cited as model for developing nations. High Yield
Scale: ₹27.28 lakh crore monthly transactions (Oct 2025). 20 lakh crore+ annual transactions. World's fastest-growing payment system.
Interoperability: Works across 400+ banks and all payment apps (PhonePe, Google Pay, Paytm, BHIM).
Use cases: Person-to-person, merchant payments, government tax payments, EMI, SIP investments.
Global: UPI live in Singapore, France, UAE, UK, USA, Australia, Nepal. G20 cited as model for developing nations. High Yield
🏦
PMJDY — Financial Inclusion Backbone
Full name: Pradhan Mantri Jan Dhan Yojana. Launched August 28, 2014.
Scale: 52+ crore Jan Dhan bank accounts by 2024–25. 56%+ accounts held by women. Deposits crossed ₹2 lakh crore.
Features: Zero-balance account, RuPay debit card, ₹1 lakh accident insurance, ₹30,000 life cover, overdraft up to ₹10,000.
Link to DPI: PMJDY + Aadhaar + Mobile = JAM Trinity — foundation of Direct Benefit Transfer (DBT). Eliminated ₹2.73 lakh crore in leakage/corruption by 2023 (govt data). High Yield
Scale: 52+ crore Jan Dhan bank accounts by 2024–25. 56%+ accounts held by women. Deposits crossed ₹2 lakh crore.
Features: Zero-balance account, RuPay debit card, ₹1 lakh accident insurance, ₹30,000 life cover, overdraft up to ₹10,000.
Link to DPI: PMJDY + Aadhaar + Mobile = JAM Trinity — foundation of Direct Benefit Transfer (DBT). Eliminated ₹2.73 lakh crore in leakage/corruption by 2023 (govt data). High Yield
📁
DigiLocker — Digital Document Wallet
What: Cloud-based digital document storage, issuance, and verification platform. Eliminates need for physical paper documents.
Scale: 37+ crore users. Billions of documents issued (Aadhaar, driving licence, marksheets, vehicle RC, insurance, academic certificates).
How it works: Documents issued by govt departments directly into citizen's DigiLocker. Legally valid — accepted by courts, banks, and government offices.
Use cases: Show driving licence to traffic police digitally; submit degree certificate for job; income tax filing; scholarship applications. CA Relevant
Scale: 37+ crore users. Billions of documents issued (Aadhaar, driving licence, marksheets, vehicle RC, insurance, academic certificates).
How it works: Documents issued by govt departments directly into citizen's DigiLocker. Legally valid — accepted by courts, banks, and government offices.
Use cases: Show driving licence to traffic police digitally; submit degree certificate for job; income tax filing; scholarship applications. CA Relevant
🔄
Account Aggregator — Consent Data Sharing
What: RBI-regulated framework allowing individuals to share their financial data (bank statements, investment records, insurance) with financial institutions — only with explicit consent.
Analogy: Like a "data passport" — you control who sees your financial history and for how long.
Impact: Small businesses and individuals can share their financial history with banks to get loans instantly — without visiting branches or submitting physical documents.
UPSC angle: Solves credit access problem for MSMEs and informal sector. Consent-based data sharing = resolves data privacy concerns. CA
Analogy: Like a "data passport" — you control who sees your financial history and for how long.
Impact: Small businesses and individuals can share their financial history with banks to get loans instantly — without visiting branches or submitting physical documents.
UPSC angle: Solves credit access problem for MSMEs and informal sector. Consent-based data sharing = resolves data privacy concerns. CA
🏥
Health DPI — CoWIN, eSanjeevani, ABHA
CoWIN: 220+ crore vaccination registrations and certificates. Proved India's real-time DPI capability during COVID-19. Used by 50+ countries as a model.
eSanjeevani: National telemedicine platform — 18+ crore consultations. Connects patients in remote areas with doctors. CA
Aarogya Setu: COVID-19 contact tracing app — 200M+ downloads. Privacy debate (mandatory for workers initially).
ABHA: Ayushman Bharat Health Account — unique 14-digit health ID. Stores all health records digitally. Part of National Digital Health Mission (NDHM). CA
eSanjeevani: National telemedicine platform — 18+ crore consultations. Connects patients in remote areas with doctors. CA
Aarogya Setu: COVID-19 contact tracing app — 200M+ downloads. Privacy debate (mandatory for workers initially).
ABHA: Ayushman Bharat Health Account — unique 14-digit health ID. Stores all health records digitally. Part of National Digital Health Mission (NDHM). CA
| Platform | What it does | Key Statistic |
|---|---|---|
| GeM (Government e-Marketplace) | Government procurement platform — all govt purchases (stationery to aircraft) through transparent digital marketplace | ₹4 lakh crore+ GMV by 2024–25; 1.5+ crore sellers and buyers. Eliminates corruption in procurement. |
| FASTag | RFID-based digital toll collection on national highways. Vehicle-linked; auto-deducts toll as vehicle passes | 96%+ of toll payments via FASTag. Cashless, contactless, no queues. Linked to vehicle RC database. |
| UMANG App | Unified Mobile Application for New-age Governance — single app for all government services | 1,700+ services from 200+ departments. PF balance, Aadhaar, driving licence, EPFO, passport — all in one app. |
| API Setu | Open API marketplace allowing public and private organisations to connect their systems with government data | Enables businesses to verify Aadhaar, PAN, vehicle registration, tax data through standardised APIs. |
| BHIM App | Bharat Interface for Money — government-backed UPI app for direct bank-to-bank transfers | Based on UPI. Designed for feature phone users too (USSD-based *99#). Accessible without smartphones. |
| eNAM | Electronic National Agriculture Market — digital platform linking 1,000+ APMCs (agricultural markets) | Allows farmers to sell produce across India online. Transparent price discovery. Reduces middlemen. |
📋 PYQ — UPSC Prelims2023
Which of the following best describes the "JAM Trinity" in the context of India's financial inclusion efforts?
- (a) Jan Aushadhi, AYUSH, and Modicare — three government healthcare schemes
- (b) Jan Dhan bank accounts, Aadhaar identity, and Mobile phones — the three pillars enabling Direct Benefit Transfer ✓ Correct
- (c) Joint ventures, Agreements, and Memoranda of Understanding in international trade
- (d) Job creation, Affordable housing, and Manufacturing under Make in India
Explanation: The JAM Trinity = Jan Dhan (bank accounts) + Aadhaar (biometric identity) + Mobile (connectivity). Together these three pillars enable the Direct Benefit Transfer (DBT) system — welfare money goes directly from the government to the beneficiary's bank account without intermediaries. This has: (1) eliminated "leakage" and corruption in welfare distribution; (2) government estimates savings of ₹2.73 lakh crore by 2023; (3) empowered women (56% of PMJDY accounts); (4) brought crores of Indians into the formal banking system. The concept was popularized by the Economic Survey 2015–16.
📋 PYQ — UPSC Prelims2021
The UPI (Unified Payments Interface) was developed by which organisation?
- (a) Reserve Bank of India (RBI)
- (b) National Payments Corporation of India (NPCI) ✓ Correct
- (c) Ministry of Finance, Government of India
- (d) State Bank of India (SBI)
Explanation: UPI was developed and is managed by NPCI (National Payments Corporation of India) — an umbrella organisation for operating retail payment and settlement systems in India. NPCI was set up by RBI and the Indian Banks' Association (IBA). It also operates IMPS, RuPay, NACH, BBPS, NETC (FASTag), and Bharat BillPay. UPI was launched in April 2016. The RBI provides the regulatory oversight, but NPCI built and operates the technical infrastructure. The BHIM app was launched by the government but runs on NPCI's UPI rails.
🤝
How DPI Supports Inclusive Development
Financial inclusion · Rural access · Women empowerment · Healthcare · Credit · Social equity
💰 Financial Inclusion: Aadhaar-based eKYC + PMJDY brought millions into formal banking. 52+ crore Jan Dhan accounts; 56% held by women. DBT eliminates middlemen — money reaches beneficiary directly. Eliminated fake/ghost beneficiaries saving ₹2.73 lakh crore (estimated).
💸 Low-Cost Universal Payments: UPI allows instant payments from ₹1 to crores — same infrastructure for a vegetable vendor and a corporation. Rural users, small merchants, micro-entrepreneurs all participate equally. 20 lakh crore+ annual transactions (Oct 2025).
💸 Low-Cost Universal Payments: UPI allows instant payments from ₹1 to crores — same infrastructure for a vegetable vendor and a corporation. Rural users, small merchants, micro-entrepreneurs all participate equally. 20 lakh crore+ annual transactions (Oct 2025).
🏥 Healthcare & Welfare: eSanjeevani — 18+ crore telemedicine consultations. CoWIN — 220+ crore vaccine certificates. Rural patients consult specialists in cities without travelling.
📋 Access to Services: UMANG = 1,700+ govt services on one app. DigiLocker = 37+ crore users with digital documents. No more travelling to offices for documents. FASTag = cashless highway toll for 96%+ vehicles.
💼 Credit for MSMEs: Account Aggregator lets small businesses share financial data to get loans quickly. Previously, lack of formal credit history excluded them from banking.
📋 Access to Services: UMANG = 1,700+ govt services on one app. DigiLocker = 37+ crore users with digital documents. No more travelling to offices for documents. FASTag = cashless highway toll for 96%+ vehicles.
💼 Credit for MSMEs: Account Aggregator lets small businesses share financial data to get loans quickly. Previously, lack of formal credit history excluded them from banking.
🌐
Global Recognition of India's DPI Model
G20 · UN · World Bank · Countries adopting India Stack · Diplomatic soft power
🌏
G20 Recognition
India's G20 Presidency 2023 made DPI a central theme. G20 New Delhi Declaration cited UPI as a model for developing nations. Created G20 DPI Framework for global adoption.
🇺🇳
UN Global Digital Compact
UN prioritised DPI in the Global Digital Compact (2024). Recognised India's model as a pathway for developing countries to leapfrog traditional development barriers.
🏦
World Bank
World Bank praised India's DPI for enhancing financial inclusion and government service delivery. Called India's DPI model a template for emerging economies.
| Country/Region | What They're Adopting | Status |
|---|---|---|
| Armenia, Sierra Leone, Suriname, Antigua & Barbuda | India Stack — signed MoUs to adopt at no cost | MoUs signed. Implementation underway. |
| 9 developing nations | MOSIP (Modular Open Source Identity Platform) — India's open-source identity system | National ID systems being built using MOSIP. |
| Singapore | UPI-PayNow interoperability | Live since February 2023. Indians can pay Singaporeans in real-time across border. |
| UAE, France, UK, Mauritius, Nepal, Bhutan | UPI for cross-border payments | Live or in advanced stages. Indians abroad can use UPI. |
| France, Germany, Japan | Evaluating UPI-like systems for their ecosystems | Under study. Interested in India's interoperable model. |
| 50+ countries | CoWIN platform for vaccination management | CoWIN source code shared with WHO. Many countries used India's model for COVID vaccination drives. |
DPI as Diplomatic Soft Power — UPSC Angle
India is exporting its DPI model as diplomatic soft power — offering India Stack at no cost to developing nations (unlike private US tech giants who extract data and charge). This positions India as a "Vishwabandhu" (friend of the world) and aligns with its "Global South leadership" narrative. PM Modi's emphasis on DPI at G20, UNGA reflects this strategic dimension. The India Stack is becoming India's equivalent of China's BRI — a way to build influence, but through open-source digital infrastructure rather than debt. High Yield Essay/GS-II angle
⚠️
Challenges in Implementing DPI
Digital divide · Privacy · Interoperability · Literacy · Regulatory gaps
| Challenge | Description | Way Forward |
|---|---|---|
| Digital Divide & Connectivity | 25%+ of India lacks reliable internet. Rural, remote, and tribal areas lack smartphones and broadband. Unequal access means DPI benefits are skewed towards urban populations. | BharatNet (rural broadband), PM-WANI (WiFi hotspots), feature-phone-accessible UPI (*99# USSD), offline-capable Aadhaar authentication. |
| Data Privacy & Security | Sensitive biometric + financial data in systems like Aadhaar, UPI, DigiLocker. Risks of identity theft, data breaches, surveillance. Supreme Court held privacy as fundamental right (Puttaswamy 2017). | Digital Personal Data Protection Act 2023 — India's first comprehensive data protection law. Data Fiduciary obligations; user rights; Data Protection Board. CA |
| Interoperability & Legacy Systems | India's DPI platforms must integrate with each other (Aadhaar + UPI + DigiLocker + ABHA etc.) AND with legacy IT systems in state governments, PSUs, and old banks. Complex and error-prone. | API Setu provides standardised integration. Common standards for data exchange. Central state government IT harmonisation. |
| Digital Literacy | Only 45–50% of rural adults feel confident using digital platforms (2024 survey). UPI frauds, phishing, and social engineering are exploiting digitally unskilled users, especially elderly and poor. | DigiDhan Mission, Common Service Centres (CSCs), SBI Grameen Seva, India Post Payments Bank at grassroots. Cyber Suraksha awareness. |
| Regulatory Gaps | Rapid innovation outpaces regulation. AI in credit scoring, algorithmic bias in welfare delivery, surveillance via DPI — all raise ethical concerns not fully addressed by current law. | DPDP Act 2023 (data protection), MEITY's AI governance draft framework, SEBI/RBI regulating fintech on UPI rails, oversight of Account Aggregators. |
| Exclusion of Marginalised | Persons with disabilities face biometric failures in Aadhaar (fingerprint issues). Migrants, homeless, and nomads struggle to access DPI without stable addresses or documents. | Enrolment exceptions for biometric failures, virtual IDs as alternatives, mobile enrollment vans for nomadic/tribal populations. |
| UPI Frauds & Cyber Crime | UPI-related frauds rose sharply. NCRB data: cyber financial frauds constitute 67% of all cybercrime in India. Fake QR codes, vishing (voice phishing), fake UPI apps are common. | MHA I4C (Indian Cyber Crime Coordination Centre), 1930 helpline, National Cybercrime Reporting Portal, RBI's digital payment safety rules. |
📰
Current Affairs — DPI & India Stack (2024–2025)
DPDP Act · UPI records · New DPI layers · Global adoption · UPSC 2026 relevance
🇮🇳 India — Key 2024–2025 Developments
Digital Personal Data Protection (DPDP) Act, 2023: India's comprehensive data protection law. Mandates: (a) user consent for data processing; (b) Data Fiduciaries must notify breaches; (c) Data Protection Board established; (d) Children's data special protection; (e) Right to erasure. Modelled on GDPR but adapted for India. High Yield CA
UPI one97communications record (Oct 2025): ₹27.28 lakh crore in monthly transactions — new all-time high. UPI now processes more transactions than VISA and Mastercard combined in India.
UPI 123Pay (for feature phones): Allows UPI payments WITHOUT internet. Uses IVR (phone call), missed call, or OTP. Crucial for 250+ million feature phone users in India.
UPI Lite X: Offline UPI payments using NFC technology. Pay without internet at POS terminals. Reduces dependence on connectivity.
UPI one97communications record (Oct 2025): ₹27.28 lakh crore in monthly transactions — new all-time high. UPI now processes more transactions than VISA and Mastercard combined in India.
UPI 123Pay (for feature phones): Allows UPI payments WITHOUT internet. Uses IVR (phone call), missed call, or OTP. Crucial for 250+ million feature phone users in India.
UPI Lite X: Offline UPI payments using NFC technology. Pay without internet at POS terminals. Reduces dependence on connectivity.
🌍 Global & Policy Developments
UN Global Digital Compact (2024): Adopted at UNGA. DPI as core pillar of global digital cooperation. India's model cited prominently. India leading "DPI for Global South" initiative.
GeM crosses ₹4 lakh crore GMV: Government e-Marketplace now world's largest government procurement platform (by number of transactions). 1.5 crore+ sellers.
Open Network for Digital Commerce (ONDC): India's open-protocol e-commerce network — democratising e-commerce by allowing any app to list products from any seller. Breaking Amazon/Flipkart duopoly. DPI for commerce. High Yield CA
OCEN (Open Credit Enablement Network): Open credit protocol allowing cash flow-based lending for MSMEs at scale — part of India Stack expansion into credit.
National Data Governance Framework (NDGF) Policy draft: Proposal for how non-personal data from government can be shared for innovation while protecting citizens.
GeM crosses ₹4 lakh crore GMV: Government e-Marketplace now world's largest government procurement platform (by number of transactions). 1.5 crore+ sellers.
Open Network for Digital Commerce (ONDC): India's open-protocol e-commerce network — democratising e-commerce by allowing any app to list products from any seller. Breaking Amazon/Flipkart duopoly. DPI for commerce. High Yield CA
OCEN (Open Credit Enablement Network): Open credit protocol allowing cash flow-based lending for MSMEs at scale — part of India Stack expansion into credit.
National Data Governance Framework (NDGF) Policy draft: Proposal for how non-personal data from government can be shared for innovation while protecting citizens.
| Initiative | What it is | UPSC Relevance |
|---|---|---|
| DPDP Act 2023 | Digital Personal Data Protection Act — India's first comprehensive data protection law | GS-II (Governance, law), GS-III (Technology). Privacy as fundamental right (Puttaswamy 2017). Data Fiduciary, Data Principal, Data Protection Board concepts. |
| ONDC (Open Network for Digital Commerce) | Open-protocol e-commerce — any buyer app can connect to any seller app. Like UPI for commerce. | GS-III Economy. DPI approach applied to commerce. Inclusion of small retailers. Anti-monopoly. Compare with UPI model. |
| IndiaAI Mission | India's ₹10,300 crore AI mission — compute infrastructure, startups, responsible AI | GS-III Science. AI + DPI intersection. UPSC 2025–26 high relevance. |
| Digital Rupee (e-RUPI / CBDC) | India's Central Bank Digital Currency (CBDC). RBI-issued digital legal tender. Different from crypto. | GS-III Economy. Monetary policy, financial inclusion. UPI vs CBDC difference important. |
| PM-WANI | Public WiFi hotspot scheme — anyone can become a "PDO" (Public Data Office) providing WiFi | GS-III / GS-II. Bridging digital divide. Last-mile connectivity. |
🎯
Practice MCQs — India Stack & DPI
UPSC-style · Click an option to reveal answer
🏛️ Click any option to check your answer
Q1. What does the "Account Aggregator" framework in India primarily enable?
- (a) It aggregates all tax payments and GST filings into a single portal
- (b) It consolidates multiple bank accounts into one master account
- (c) It enables citizens to securely share their financial data with institutions of their choice, with full consent and control
- (d) It allows the government to monitor all financial transactions above ₹10,000
The Account Aggregator (AA) framework is an RBI-regulated consent-based data sharing system. It works like a "data courier" — it moves financial data from a Financial Information Provider (FIP — like a bank) to a Financial Information User (FIU — like a lending NBFC) with the account holder's explicit consent. The citizen controls: WHAT data is shared, WITH WHOM, and FOR HOW LONG. No institution can access data without the citizen's consent token. This revolutionises credit access for MSMEs and informal workers — a small vegetable vendor can share 6 months of bank statement data to get a business loan in minutes, without visiting a branch. It is part of India Stack's "Consent Layer" and is built on DigiLocker infrastructure. As of 2024, 9 of India's largest banks are part of the AA framework.
Q2. ONDC (Open Network for Digital Commerce) is best described as:
- (a) A government e-commerce platform competing with Amazon and Flipkart
- (b) A portal for listing government tenders and procurement
- (c) A digital marketplace exclusively for MSME products
- (d) An open-protocol e-commerce network where any buyer app can connect with any seller app, like UPI but for commerce
ONDC (Open Network for Digital Commerce) is India's DPI approach applied to e-commerce. Just as UPI uses open protocols to make all payment apps interoperable, ONDC uses open protocols to make all e-commerce apps interoperable. A buyer using Paytm can buy from a seller listed on Meesho — neither party needs to be on the same platform. This breaks the platform monopoly (Amazon/Flipkart's "walled garden" model), enables small kirana stores and artisans to list products on multiple platforms simultaneously, and lowers commission fees. ONDC was launched by DPIIT in 2022. It is not a government e-commerce store (that is GeM — Government e-Marketplace, for government procurement). ONDC is a network, not a platform. This distinction is frequently tested in UPSC.
Q3. The Supreme Court's "Puttaswamy Judgment" (2017) is significant in the context of digital governance because:
- (a) It declared Aadhaar to be unconstitutional and ordered it to be discontinued
- (b) It declared the Right to Privacy to be a Fundamental Right under Article 21, setting constitutional limits on how government uses personal data including Aadhaar
- (c) It mandated that all government services must be provided digitally by 2025
- (d) It required India to adopt the European GDPR as its data protection standard
In Justice K.S. Puttaswamy (Retd.) v. Union of India (2017), a 9-judge Constitution Bench of the Supreme Court unanimously held that the Right to Privacy is a Fundamental Right under Article 21 (Right to Life and Personal Liberty). This was a landmark judgment with profound implications for DPI. The 2018 Aadhaar judgment (Puttaswamy II) then applied this — holding Aadhaar constitutional for welfare services but ruling it CANNOT be made mandatory for private services (like mobile SIMs or bank accounts by private companies) as that would disproportionately infringe privacy. This judgment directly led to the need for the Digital Personal Data Protection (DPDP) Act 2023 to create a comprehensive legal framework for data privacy. It set the constitutional guardrails for India's entire DPI ecosystem.
Q4. What is the "India Stack" and who conceptualised it?
- (a) A government supercomputer project conceptualised by ISRO
- (b) India's 5G technology framework conceptualised by DoT (Department of Telecommunications)
- (c) A unified set of open APIs enabling digital infrastructure across identity, payments, data sharing, and consent — conceptualised by iSPIRT
- (d) India's cloud computing infrastructure for government data storage conceptualised by NIC
India Stack is a unified set of open APIs (Application Programming Interfaces) and digital public infrastructure that allows governments, businesses, and developers to build digital services at scale. It comprises four layers: Presenceless (Aadhaar identity), Paperless (DigiLocker, eSign), Cashless (UPI, AePS), and Consent (Account Aggregator). It was conceptualised by iSPIRT (Indian Software Product Industry Round Table) — a think-tank of Indian tech entrepreneurs and innovators — and implemented in partnership with government agencies like UIDAI (for Aadhaar), NPCI (for UPI), and Ministry of Electronics & IT (MeitY). The World Bank, G20, and UN have subsequently adopted India Stack as a global template for DPI.
Q5. The Digital Personal Data Protection (DPDP) Act 2023 introduced the concept of "Data Fiduciary." What does this mean?
- (a) Any entity that collects and processes personal data — they have a legal duty of trust and care toward the individuals (Data Principals) whose data they hold
- (b) A government-appointed officer who oversees data protection compliance
- (c) An individual who stores data on behalf of a company
- (d) A financial institution that handles digital payment data under RBI regulation
Under the DPDP Act 2023, a Data Fiduciary is any person/entity that determines the purpose and means of processing personal data. They are called "fiduciaries" because they hold data in a position of trust — like a trustee. Key obligations of a Data Fiduciary: (1) process data only with consent; (2) use data only for the stated purpose; (3) notify the Data Protection Board and individuals if a data breach occurs; (4) erase data when purpose is fulfilled or consent withdrawn; (5) special protections for children's data. The Data Principal is the individual whose data is being collected (the "owner"). The act also creates a Data Protection Board of India to adjudicate complaints. Key rights of Data Principals: right to information, correction, erasure, and grievance redressal. DPDP Act 2023 is India's response to the Puttaswamy judgment's requirement for a data protection framework.
Q6. Consider the following statements about the Unified Payments Interface (UPI):
1. UPI was developed by the Reserve Bank of India (RBI).
2. UPI transactions surpassed VISA and Mastercard combined in India by volume by 2024.
3. UPI is accessible to feature phone users without internet through the USSD *99# channel.
Which of the above statements is/are correct?
1. UPI was developed by the Reserve Bank of India (RBI).
2. UPI transactions surpassed VISA and Mastercard combined in India by volume by 2024.
3. UPI is accessible to feature phone users without internet through the USSD *99# channel.
Which of the above statements is/are correct?
- (a) 1 and 2 only
- (b) 1 and 3 only
- (c) 2 and 3 only
- (d) 1, 2 and 3
Statement 1 ✗ — UPI was developed by NPCI (National Payments Corporation of India), not RBI. RBI provides regulatory oversight, but NPCI built and operates the UPI infrastructure. Statement 2 ✓ — UPI transactions by volume surpassed VISA and Mastercard combined in India by 2022–23. In October 2025, UPI processed ₹27.28 lakh crore monthly — a new record. Statement 3 ✓ — USSD *99# channel (also called UPI 123Pay) allows UPI payments without a smartphone or internet connection, using basic mobile phones. Users dial *99# and follow IVR menus. This is critical for financial inclusion of the ~250 million feature phone users in India. Only statements 2 and 3 are correct — answer is (c).
⚡ Quick Revision — India Stack & DPI
| Topic | Key Facts for UPSC |
|---|---|
| DPI Definition | Foundational, reusable digital systems enabling services across sectors. Like roads — anyone can build on them. Three core layers: Identity + Payments + Data Exchange. World Bank/UN describe DPI as development priority. |
| India Stack — 4 Layers | Presenceless (Aadhaar) → Paperless (DigiLocker, eSign) → Cashless (UPI, AePS) → Consent (Account Aggregator). Conceptualised by iSPIRT. |
| Aadhaar | 12-digit biometric ID by UIDAI. 138.34 crore issued. Enables eKYC, DBT, authentication. SC Puttaswamy 2017: privacy = fundamental right. Aadhaar Act 2016. Cannot be mandatory for private services (SC 2018). |
| UPI | Real-time interoperable payments. By NPCI. ₹27.28 lakh crore monthly (Oct 2025). Works across 400+ banks. UPI 123Pay = feature phones. UPI Lite X = offline NFC. Live in Singapore, France, UAE, UK, USA. G20 cited as global model. |
| PMJDY + JAM Trinity | 52+ crore Jan Dhan accounts; 56% women. JAM = Jan Dhan + Aadhaar + Mobile. Enables DBT. ₹2.73 lakh crore saved from leakages (est.). Deposits: ₹2 lakh crore+. |
| DigiLocker | Digital document wallet. 37+ crore users. Legally valid documents. Driving licence, Aadhaar, degrees, RC — stored and verified digitally. No physical documents needed. |
| Account Aggregator | RBI-regulated consent-based financial data sharing. User controls who sees data. Enables MSME credit without physical bank visits. Consent Layer of India Stack. |
| CoWIN, eSanjeevani, ABHA | CoWIN: 220+ crore vaccine registrations. eSanjeevani: 18+ crore telemedicine consultations. ABHA: 14-digit health ID (National Digital Health Mission). Aarogya Setu: 200M+ downloads. |
| GeM, UMANG, FASTag | GeM: ₹4 lakh crore+ GMV, transparent govt procurement. UMANG: 1,700+ services, 200+ depts. FASTag: 96%+ toll payments digital. API Setu: open API interoperability. |
| Global Adoption | G20 New Delhi Declaration cited UPI. UN Global Digital Compact (2024) prioritised DPI. MOSIP used by 9 nations. India Stack MoUs: Armenia, Sierra Leone, Suriname, Antigua. CoWIN shared with 50+ countries. |
| DPDP Act 2023 | India's first comprehensive data protection law. Data Fiduciary (processes data) + Data Principal (individual). Right to consent, correction, erasure. Data Protection Board. Special protection for children. Response to Puttaswamy judgment. |
| ONDC | Open Network for Digital Commerce — open-protocol e-commerce (like UPI for commerce). Any buyer app + any seller app interoperable. Democratises e-commerce. Breaks Amazon/Flipkart duopoly. Not a govt e-store (that's GeM). |
| Challenges | Digital divide (25%+ no internet), data privacy (DPDP Act partial solution), UPI frauds (1930 helpline), digital literacy (45–50% rural confidence only), biometric exclusions (Aadhaar fingerprint failures). |
🚨 5 UPSC TRAPS — India Stack & DPI:
Trap 1 — "UPI was developed by RBI" → WRONG! UPI was developed by NPCI (National Payments Corporation of India) — not RBI. RBI regulates it, but NPCI built and operates UPI. NPCI also runs IMPS, RuPay, NACH, BBPS, and FASTag (NETC). This confusion is common and exploited in UPSC options. The distinction: RBI = regulator, NPCI = infrastructure operator.
Trap 2 — "ONDC is a government e-commerce store like Amazon" → WRONG! ONDC is a network/protocol, NOT a platform. It's like UPI — UPI is not a bank, it's a protocol for banks to connect. Similarly, ONDC is not an e-store; it's a protocol allowing different buyer apps and seller apps to connect with each other. GeM (Government e-Marketplace) is the government procurement platform. Students frequently confuse ONDC with GeM.
Trap 3 — "Aadhaar is mandatory for all services after the Aadhaar Act 2016" → WRONG! The Supreme Court in the Puttaswamy II judgment (2018) held that Aadhaar CAN be used for government welfare services and income tax but CANNOT be made mandatory for private services (mobile SIMs, bank accounts by private companies, school admissions). Section 57 of Aadhaar Act was struck down. Many exam questions try to confuse the 2016 Act with the 2018 SC ruling.
Trap 4 — "The DPDP Act 2023 is India's equivalent of Europe's GDPR" → PARTIALLY MISLEADING! While both regulate personal data, the DPDP Act 2023 differs significantly from GDPR: India's Act is simpler, gives government agencies more exemptions, does not apply to non-personal/anonymised data (separately handled by National Data Governance Framework), and the Data Protection Board is NOT independent of the government (unlike GDPR regulators). Do not equate them for UPSC — know the key features of DPDP Act specifically: consent-based, Data Fiduciary, Data Principal, Data Protection Board, children's data protection.
Trap 5 — "Digital Rupee (CBDC) is the same as UPI" → WRONG! Digital Rupee (e₹) is India's Central Bank Digital Currency (CBDC) — issued by RBI and is a legal tender (like physical rupee, but digital). UPI is a payment RAILS system — it moves money between existing bank accounts. CBDC is a form of MONEY (digital currency). You can pay via UPI, but what's in your bank account is regular money. CBDC is a digital token that IS the money. The confusion: both involve digital payments, but CBDC is a currency and UPI is a transfer protocol.
Trap 1 — "UPI was developed by RBI" → WRONG! UPI was developed by NPCI (National Payments Corporation of India) — not RBI. RBI regulates it, but NPCI built and operates UPI. NPCI also runs IMPS, RuPay, NACH, BBPS, and FASTag (NETC). This confusion is common and exploited in UPSC options. The distinction: RBI = regulator, NPCI = infrastructure operator.
Trap 2 — "ONDC is a government e-commerce store like Amazon" → WRONG! ONDC is a network/protocol, NOT a platform. It's like UPI — UPI is not a bank, it's a protocol for banks to connect. Similarly, ONDC is not an e-store; it's a protocol allowing different buyer apps and seller apps to connect with each other. GeM (Government e-Marketplace) is the government procurement platform. Students frequently confuse ONDC with GeM.
Trap 3 — "Aadhaar is mandatory for all services after the Aadhaar Act 2016" → WRONG! The Supreme Court in the Puttaswamy II judgment (2018) held that Aadhaar CAN be used for government welfare services and income tax but CANNOT be made mandatory for private services (mobile SIMs, bank accounts by private companies, school admissions). Section 57 of Aadhaar Act was struck down. Many exam questions try to confuse the 2016 Act with the 2018 SC ruling.
Trap 4 — "The DPDP Act 2023 is India's equivalent of Europe's GDPR" → PARTIALLY MISLEADING! While both regulate personal data, the DPDP Act 2023 differs significantly from GDPR: India's Act is simpler, gives government agencies more exemptions, does not apply to non-personal/anonymised data (separately handled by National Data Governance Framework), and the Data Protection Board is NOT independent of the government (unlike GDPR regulators). Do not equate them for UPSC — know the key features of DPDP Act specifically: consent-based, Data Fiduciary, Data Principal, Data Protection Board, children's data protection.
Trap 5 — "Digital Rupee (CBDC) is the same as UPI" → WRONG! Digital Rupee (e₹) is India's Central Bank Digital Currency (CBDC) — issued by RBI and is a legal tender (like physical rupee, but digital). UPI is a payment RAILS system — it moves money between existing bank accounts. CBDC is a form of MONEY (digital currency). You can pay via UPI, but what's in your bank account is regular money. CBDC is a digital token that IS the money. The confusion: both involve digital payments, but CBDC is a currency and UPI is a transfer protocol.
