New Delhi: In a written reply to a question in the Rajya Sabha today, Minister of State in the Ministry of Civil Aviation, Gen. (Dr) V. K. Singh (Retd), highlighted the privacy-centric approach of the Digi Yatra Central Ecosystem (DYCE). This digital initiative, managed by the Digi Yatra Foundation, operates on the principles of privacy by design/default, ensuring that passengers’ Personally Identifiable Information (PII) data is not centrally stored.
The DYCE has implemented stringent measures to safeguard passenger data, with processes subjected to audits and certification by CERT-In empanelled agencies. This rigorous oversight is in place to guarantee adherence to data privacy and security standards, addressing growing concerns about the protection of personal information in the digital age.
Notably, the Digi Yatra Foundation is structured as a Not-For-Profit company under Section 8 of the Companies Act, 2013. This unique organizational structure places it outside the ambit of the Right to Information (RTI) act, reinforcing its commitment to transparency while upholding privacy standards.
The guidelines governing Digi Yatra were issued by the Directorate General of Civil Aviation (DGCA) through the Aeronautical Information Circular (AIC) No. 09/2022 dated 18.04.2022. These guidelines establish a decentralized mobile wallet-based identity management platform. Under this framework, passengers’ personal information is securely stored within their mobile wallets. The data is then transmitted to the departure airport in an encrypted format, and after 24 hours from the departure of the flight, it is systematically purged from the system.
This approach not only streamlines the passenger experience but also addresses critical data protection concerns associated with the implementation of Digi Yatra. The 24-hour data retention period ensures that information is only held for the necessary duration, contributing to enhanced privacy safeguards.
Gen. (Dr) V. K. Singh (Retd) emphasized that these processes are consistently scrutinized through audits and certifications by CERT-In empanelled agencies. This continuous evaluation is integral to maintaining the highest standards of data privacy and security, instilling confidence in passengers utilizing the Digi Yatra system.
In light of these measures, the Digi Yatra Central Ecosystem stands as a model for digital initiatives, prioritizing passenger privacy while leveraging technology for seamless and secure air travel experiences.