"(a) What Are the Options Open to Vikas? How Should He Balance Fiscal Probity With Empathy? (b) Discuss the Ethics of Using Technology as a Gatekeeper for Welfare Schemes" — UPSC Mains 2026 GS4 Q10
A complete, examiner-standard 20-mark case study answer for the UPSC Mains 2026 GS Paper 4 case on biometric authentication failure in the PDS — with an error-asymmetry panel, a four-tier authentication cascade, an options table, and the Aadhaar Act Section 7 proviso as the decisive legal anchor.
UPSC Mains 2026 GS Paper 4 set a 20-mark case study on biometric authentication failure in the public distribution system. Below is a full model answer with a static-portion refresher.
Vikas, Collector of a remote hilly district, finds that mandatory real-time biometric authentication in the PDS fails for growing children, manual labourers and senior citizens, and again during low connectivity. Distributors then use personal discretion to identify recipients. Strict adherence protects fiscal probity but may deny food to the economically weaker sections and impinge on Article 21; unregulated discretion invites misuse and leakage.
(a) What are the options open to Vikas? How should he balance fiscal probity with empathy towards the designated beneficiaries?
(b) Discuss the ethics of using technology as a gatekeeper for welfare schemes.
Model Answer
Stakeholders and Their Interests
| Stakeholder | Interest at Stake |
|---|---|
| EWS beneficiaries | Food security as a statutory entitlement and an Article 21 right; dignity; freedom from repeated futile visits |
| Fair Price Shop dealers | Clear instructions; protection from liability whether they deny grain or exercise discretion |
| Vikas as Collector | Statutory duty under the NFSA, fiscal accountability, and personal moral responsibility for exclusion in his district |
| State and Union governments | Subsidy integrity, elimination of ghost beneficiaries, audit compliance |
| Taxpayers | Efficient use of public resources |
| Panchayats and vigilance committees | Local verification role and community accountability under the NFSA |
(a) Options Before Vikas and the Balance
The Ethical Asymmetry That Settles the Balance
Exclusion Error — Denying an Eligible Person
- Consequence: hunger, malnutrition, in extreme cases death
- Falls on the poorest, who have no alternative source
- Irreversible — a missed month's ration cannot be recovered
- Violates a statutory entitlement and Article 21
- Invisible in official data: the excluded leave no record
Inclusion Error — Grain Reaching an Ineligible Person
- Consequence: fiscal loss, quantifiable and bounded
- Borne diffusely by the exchequer
- Recoverable through audit, recovery and prosecution
- Violates efficiency, not a fundamental right
- Visible and detectable in records
- The errors are not morally equivalent, so a system calibrated to minimise total error is wrongly designed. It should be calibrated to minimise the graver error, accepting a higher rate of the lesser one — the welfare analogue of the principle that it is better to let some guilty go free than to convict the innocent.
- The failure is systemic, not personal — worn fingerprints are an occupational consequence of manual labour, and poor connectivity is an infrastructural deficit. The state is treating its own design failure as the beneficiary's problem to solve.
- The law already answers this — the proviso to Section 7 of the Aadhaar Act, 2016 requires that where authentication fails, the individual shall be offered alternate means of identification. Providing a fallback is therefore a statutory obligation, not administrative generosity. In the 2018 Aadhaar judgment the Supreme Court reinforced that no genuine beneficiary may be denied entitlement for authentication failure.
The Options
| Option | Merits | Demerits |
|---|---|---|
| 1. Strict biometric-only enforcement | Maximum leakage control; audit-safe for the administration | Denies food to genuine beneficiaries; violates the Section 7 proviso and Article 21; protects the officer at the citizen's expense |
| 2. Leave it to dealer discretion | Nobody is turned away in practice | Unrecorded, unaccountable discretion invites diversion and creates a bargaining position over the beneficiary |
| 3. Suspend biometric authentication in the district | Removes the immediate barrier entirely | Beyond the Collector's authority; forfeits genuine gains against ghost cards; over-corrects a solvable problem |
| 4. Layered authentication cascade with documented exceptions and audit | No one is denied; every transaction leaves a trace; discretion is structured, recorded and reviewable | Requires equipment, training and monitoring effort; exception rates need active supervision |
Recommended: Option 4 — Structured Fallback, Never Denial
1. Fingerprint
Standard biometric match, first attempt
2. Iris or Face
Unaffected by manual labour and ageing
3. OTP or Family Member
Registered mobile, or authenticated nominee
4. Recorded Exception
Manual issue with register entry, photograph and community witness
- Issue a written district order: no eligible beneficiary is to be turned away. Where the cascade is exhausted, grain shall be issued against a recorded exception. This single instruction resolves the moral core of the case and is defensible because it implements the Section 7 proviso rather than departing from it.
- Mandate an exception register at every shop — name, ration card number, date, reason for failure, photograph, and countersignature of a Panchayat member or Vigilance Committee representative, uploaded when connectivity permits.
- Enable offline store-and-forward mode on ePoS devices, so transactions are recorded locally and synchronised later. Connectivity failure should delay reconciliation, never distribution.
- Deploy iris and face authentication at shops serving areas with high labour populations, where fingerprint failure is predictable.
- Protect the dealer — written assurance that grain issued through the recorded exception route will not attract action, removing the incentive to refuse defensively.
- Monitor exception rates, do not cap them — a ceiling would simply reintroduce denial once exceeded. Instead, flag shops with anomalous exception rates for physical verification.
- Community verification and social audit — display the beneficiary list at each shop; use Vigilance Committees and Gram Sabha social audits under the NFSA to confirm that recorded recipients actually received grain.
- Random independent checks — surprise visits and telephonic verification of a sample of exception entries.
- Publicise entitlements and grievance routes — the District Grievance Redressal Officer under the NFSA, plus a helpline, so refusal becomes reportable.
- Enable portability — One Nation One Ration Card allows collection from an alternate shop where one dealer is obstructive.
- Document and report failure-rate data — disaggregated by cause and demographic group, to the state department, converting an anecdotal problem into evidence for policy change.
- Recommend infrastructural remedy — connectivity augmentation under BharatNet, device upgrades, and periodic biometric re-enrolment for those whose fingerprints have degraded.
- The dilemma is largely dissolved, not split — discretion is not eliminated but structured. A recorded, witnessed, auditable exception is not the same thing as unaccountable dealer discretion, and it protects probity better than denial does, because denial simply hides the transaction rather than documenting it.
- Empathy is operationalised as procedure — the case invites sympathy for the beneficiary; the administrative answer is to convert that sympathy into a written order, a register and an audit trail. Compassion that is not institutionalised does not survive the officer's transfer.
- Fiscal probity is preserved where it genuinely matters — the leakage risk lies in unverifiable transactions, and every exception here is recorded, witnessed and reviewable.
(b) The Ethics of Technology as a Welfare Gatekeeper
- Security systems fail closed; welfare systems must fail open — a bank vault should refuse access when uncertain, because the cost of wrongful entry exceeds the cost of wrongful refusal. In food distribution the asymmetry runs the opposite way. Applying a fraud-prevention paradigm to an entitlement-delivery system is a category error, and it is the root of this case.
- The burden of error is placed on the wrong party — when the machine fails, it is the beneficiary who must return repeatedly, produce documents and prove herself. Ethical design places the cost of system failure on the system, not on its weakest user.
- Presumption of fraud replaces presumption of entitlement — biometric gatekeeping treats every claimant as a suspect to be cleared. This inverts the relationship between a welfare state and its citizens, and is felt as an indignity quite apart from the material loss.
- The excluded are statistically invisible — dashboards record transactions completed, not people turned away. A system can therefore report high performance precisely because its failures leave no trace, which corrupts the evidence base on which policy is judged.
- Regressive incidence of technical failure — worn fingerprints correlate with manual labour, poor connectivity with remote and hilly terrain, low digital literacy with poverty and age. The technology fails hardest for those the scheme most exists to serve.
- Technological solutionism — leakage is a governance problem with political and administrative causes; recasting it as an identity-verification problem substitutes a technical fix for institutional reform and misdiagnoses what needs repair.
- Opacity and un-contestability — a beneficiary cannot argue with a failed match. Without a human override there is no forum, no reasoning and no appeal, which offends elementary natural justice.
- Privacy, consent and function creep — biometric data collected for one purpose tends to migrate to others, and consent given under conditions of dependence is not freely given.
- Real gains exist — digital identity has enabled elimination of duplicate and ghost cards, direct transfers that bypass intermediaries, and above all portability under One Nation One Ration Card, which liberated migrant workers from the shop where their card was registered. That is a genuine expansion of freedom achieved through the same infrastructure.
- The pre-digital system was not benign — discretion previously rested entirely with dealers, with diversion, under-weighing and denial of entitlement widespread. Nostalgia for manual systems is misplaced.
- The objection is to gatekeeping, not to technology — the ethical fault lies in making authentication a condition of entitlement rather than a method of verifying it. The same technology, deployed with mandatory fallback and human override, is entirely defensible.
Conclusion
The governing principle is that technology must verify entitlement, never create it. An entitlement conferred by statute and protected by Article 21 cannot be extinguished by a device failing to read a worn fingerprint, and a state that allows this has permitted an administrative convenience to override a constitutional guarantee. For Vikas, the resolution lies not in choosing between probity and empathy but in recognising that recorded, witnessed, auditable compassion serves both — while denial serves neither, since it protects no money that was ever at risk and costs a family its month's food.
Legal framework: National Food Security Act, 2013 — legal entitlement to subsidised foodgrain for roughly two-thirds of the population, Section 12 on PDS reforms including doorstep delivery and ICT applications, Sections 14 to 16 on internal grievance redressal and the District Grievance Redressal Officer, Sections 28 and 29 on social audit and Vigilance Committees, Section 24 on the food security allowance where entitlement is not supplied. Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 — Section 7 and its proviso requiring that alternate means of identification be offered where authentication fails. Justice K.S. Puttaswamy (Retd.) v. Union of India (2018), the Aadhaar judgment, upholding Section 7 while directing that no genuine beneficiary be denied benefits for authentication failure; Puttaswamy (2017) on privacy and proportionality; PUCL v. Union of India (2001), the right-to-food case establishing food security within Article 21 through continuing mandamus. Article 21 (right to life with dignity), Article 47 (State duty to raise nutrition levels).
Programmes and systems: Integrated Management of PDS; ePoS devices and Aadhaar-Based Biometric Authentication; One Nation One Ration Card and the portability architecture; Pradhan Mantri Garib Kalyan Anna Yojana; Direct Benefit Transfer; BharatNet for rural connectivity; Annapurti grain ATMs. Concepts: exclusion error (Type I) versus inclusion error (Type II) and their moral asymmetry; targeting versus universalisation; fail-safe versus fail-secure design; last-mile delivery; digital divide; technological solutionism (Evgeny Morozov); algorithmic and infrastructural exclusion; Amartya Sen's entitlement approach to famine — starvation arises from failure of entitlement rather than absence of food; Jean Drèze and Reetika Khera's field research on biometric authentication failures in the PDS; Gandhi's talisman; Rawls's difference principle; the Second ARC's 12th Report on citizen-centric administration.
Answer Writing Tips for This Case Study
- The exclusion-versus-inclusion error asymmetry is the answer's foundation. Denying an eligible person risks hunger and is irreversible; supplying an ineligible one costs money and is recoverable. Because the errors differ in kind, a system minimising total error is misdesigned — it should minimise the graver one.
- The single strongest legal point is the proviso to Section 7 of the Aadhaar Act, 2016, which requires that alternate identification be offered where authentication fails. This converts the fallback from a compassionate concession into a statutory duty, and very few candidates cite it.
- Lead the action plan with a written district order that no eligible beneficiary is turned away. It is within the Collector's authority and resolves the moral core immediately.
- The key distinction is between structured and unstructured discretion. A recorded, witnessed, auditable exception is not the same as dealer discretion, and it protects probity better than denial — because denial hides the transaction while documentation preserves it.
- Monitor exception rates; do not cap them. A ceiling reintroduces denial the moment it is crossed. Flagging anomalous shops for verification achieves oversight without recreating the harm.
- For part (b), the fail-open versus fail-closed formulation is the sharpest available line: security systems should refuse when uncertain, welfare systems must supply when uncertain, and applying a fraud paradigm to an entitlement system is a category error.
- Note that the excluded are statistically invisible — dashboards count transactions completed, not people turned away. A system can therefore look successful because its failures leave no record.
- Give technology its genuine due in part (b) — ghost card elimination and One Nation One Ration Card portability are real gains, and the pre-digital system was not benign. The objection is to authentication as a condition of entitlement rather than a method of verifying it. That precision is what makes the criticism credible.
