wordpress blog stats
Connect with us

Hi, what are you looking for?

Govt reconsidering mandating Aarogya Setu: Senior MEITY official

Rakesh Maheshwari, Abhishek Singh, Aarogya Setu
Credit: Aditi Agrawal

You’re reading it here first: “It [Aarogya Setu] is based on a consent[-based] framework. Ideally, in my own opinion, it [Aarogya Setu] should not be [mandatory], it should not have been made mandatory, and this is under review presently with the government because, per se, if we are taking consent, it actually contradicts with it being made mandatory,” Rakesh Maheswhari, Senior Director and Group Coordinator, Cyber Law and e-Security at the Ministry of Electronics and Information Technology (MEITY) said during an online event organised by UN Women on “Cyber Crime Trends and Digital Safety amidst COVID-19 Pandemic”.

Shweta Reddy, from the Centre for Internet and Society, had highlighted a similar concern about futility of consent in an asymmetrical power relation during MediaNama’s discussion on privacy in the time of COVID-19: “Especially in the case of the pandemic, consent cannot be freely given. Central government employees have been told to download Aarogya Setu, so consent is gone there. … It’s not a fair choice to make between livelihood and privacy.”

Having said that, Maheshwari pointed out that if more people download the app, “the effectiveness of this app will substantially improve” and improve to the government’s ability to identify hotspots, to track people who could be potentially at risk “because of their historic data with the actual location [sic]”.

‘Data of less than 0.01% Aarogya Setu users uploaded to the server,’ says MyGov CEO

Thus far, of the 100.2 million downloads that Aarogya Setu has had, “the data of only 15,000, almost 15,000 people who have the app and tested positive has gone to the server,” Abhishek Singh, the CEO of MyGov and National eGovernance Division (NeGD), said during the webinar. “This has helped identify almost two lakh Bluetooth contacts,” he said. “15,000 on a download of 100 million is almost .01%. So only data of 1 in 10,000 people has gone on the server,” he calculated. This means that since May 11, data of more than 2,000 COVID-19 patients has been pulled to the server and an additional 60,000 Bluetooth contacts have been identified.

However, readers should note that the personal demographic data (name, gender, age, profession, travel history and phone number) is immediately uploaded to the server upon registration and hashed to a unique device ID. Here, Singh is referring to the location data that is collected every 15 minutes, and the device IDs of Bluetooth contacts that the app collects on detecting proximity; both are stored on the user’s device until pinged from the server after the user’s risk has been assessed using data analytics.

Advertisement. Scroll to continue reading.

The positive to testing ration in the general population is about 3%, Singh revealed, since India has conducted about 2 million (20 lakh) tests so far and had over 80,000 positive cases, but this ratio increases significantly when tests are conducted amidst a “vulnerable section of people”.  Of the two lack Bluetooth contacts, “depending on the level of contact that has happened, around 30,000 of these people have been tested” and “from this data we found that almost 28% people are turning positive,” he revealed.

“This reduces the pressure on health authorities and ensures that we are able to identify risk groups [to test and treat],” Singh explained.

Using data analytics to identify hotspots

“We also do a lot of data analytics with regard to the contacts and the contact history and then we identify hotspots,” Singh said. Data analytics are also used to “predict emerging hotspots”, information about which :is shared with the health authorities in the state governments and the districts and they take further action to ensure that the spread of the disease reduces”. He reiterated that this data is shared with “only authorised health authorities only for medical interventions as per the Privacy Policy”.

As of May 11, location data of infected users along with data from self-assessment test from Aarogya Setu have been used to identify 697 potential hotspots in the country, MEITY Secretary Ajay Prakash Sawhney had revealed earlier this week. IIT Madras is running the data analytics on the data collected via the app.

Only anonymised data will be shared for research purposes

Echoing Singh and the app’s privacy policy, Maheshwari said that the data collected by Aarogya Setu “will not be permanently available with the government except for the anonymised and aggregated part of it which, of course, will be … made available to all those who are seeking access to it so that useful R&D can be done on the data which has been collected. But personal data, which has been collected, will only be shared with those agencies that are directly involved, including the Ministry of Health and Family Welfare and other agencies directly involved on the ground and nobody else”.

However, as per the Aarogya Setu Data Access and Knowledge Sharing Protocol, 2020, the response data may be shared with third parties, presumably private ones. The Protocol does not place any restrictions on anonymising the response data, which includes demographic data (name, mobile number, age, gender, profession and travel history of an individual), when sharing with these third parties. The Protocol, though, specifies that only “hard anonymised” data will be shared with Indian universities and research institutions registered in India.

Advertisement. Scroll to continue reading.

Still not clear if the sun will set on the app or the Protocol

Maheshwari said that the Protocol “clearly also mentions the sunset clause”. However, this sunset clause — as per which if the Protocol is not “specifically extended” by November 11, 2020 by Empowered Group 9 on Technology and Data Management, the Protocol will lapse, meaning that all personal data will be permanently deleted — is for the Protocol, not for the app itself. This suggests that the app will be repurposed for other issues once the pandemic has been dealt with, including becoming the first building block of India health stack.

Is data collected through Aarogya Setu IVRS shared with Ayushman Bharat?

MediaNama had asked Maheshwari why the syndromic data collected via IVRS was shared with Ayushman Bharat for validation, as per the graphics shared by MEITY Secretary during a press conference on May 11. “I am not really sure if we are really sharing this data with Ayushman Bharat. This aspect, I will have to check up and then come back,” he said.

Written By

Send me tips at aditi@medianama.com. Email for Signal/WhatsApp.

MediaNama’s mission is to help build a digital ecosystem which is open, fair, global and competitive.



Releasing the policy is akin to putting the proverbial 'cart before the horse'.


The industry's growth is being weighed down by taxation and legal uncertainty.


Due to the scale of regulatory and technical challenges, transparency reporting under the IT Rules has gotten off to a rocky start.


Here are possible reasons why Indians are not generating significant IAP revenues despite our download share crossing 30%.


This article addresses the legal and practical ambiguities in understanding the complex crypto ecosystem in India.

You May Also Like


Google has released a Google Travel Trends Report which states that branded budget hotel search queries grew 179% year over year (YOY) in India, in...


135 job openings in over 60 companies are listed at our free Digital and Mobile Job Board: If you’re looking for a job, or...


Rajesh Kumar* doesn’t have many enemies in life. But, Uber, for which he drives a cab everyday, is starting to look like one, he...


By Aroon Deep and Aditya Chunduru You’re reading it here first: Twitter has complied with government requests to censor 52 tweets that mostly criticised...

MediaNama is the premier source of information and analysis on Technology Policy in India. More about MediaNama, and contact information, here.

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ

Subscribe to our daily newsletter
Your email address:*
Please enter all required fields Click to hide
Correct invalid entries Click to hide

© 2008-2021 Mixed Bag Media Pvt. Ltd. Developed By PixelVJ