On 17 June 2026, the Ministry of Electronics and Information Technology (MeitY) announced that multiple state "Family ID" credentials have been onboarded onto DigiLocker — including Maharashtra's Mahasarathi (covering around 14 crore citizens), Uttar Pradesh's Family ID, Madhya Pradesh's Samagra (around 9.5 crore) and Rajasthan's Jan Aadhaar (around 7.5 crore). The integration is two-way: citizens can pull an existing Family ID into DigiLocker and also enrol for a new one with consent directly from the app.
For CDS and OTA aspirants, this is a governance-and-technology topic that ties together Digital India, the India Stack, welfare delivery and data protection — a combination examiners increasingly favour.
What Is DigiLocker?
DigiLocker is India's flagship cloud-based digital document wallet, launched in 2015 under the Digital India programme. It allows citizens to store, access and share official documents (driving licence, vehicle registration, academic certificates, PAN, etc.) digitally.
The crucial legal point for exams: documents issued through DigiLocker are treated as legally at par with the original physical documents under the Information Technology (Preservation and Retention of Information by Intermediaries Providing Digital Locker Facilities) Rules, 2016 (framed under Section 9A and the rule-making powers of the IT Act, 2000). DigiLocker is administered by MeitY through the National e-Governance Division (NeGD). The platform now hosts well over a billion issued documents for hundreds of millions of registered users, and is built to be Aadhaar-linked for identity verification at sign-up. Its core function rests on two roles: "issuers" (government bodies that push authentic documents, e.g. CBSE marksheets, Parivahan driving licences) and "requesters" (agencies that verify them), with the citizen's consent mediating every exchange.
By onboarding state Family IDs, DigiLocker becomes a single, federated access point for household welfare credentials issued by different states — a strong example of Centre-state cooperative federalism in the digital domain, where state-issued IDs sit on a central national platform. This matters constitutionally because many welfare subjects fall in the State List or Concurrent List of the Seventh Schedule, so a central platform that respects state ownership of data is a model of technology-enabled federalism.
Digital Public Infrastructure and the India Stack
The broader idea here is Digital Public Infrastructure (DPI) — shared, interoperable digital systems (like roads or electricity grids, but digital) that the public and private sectors build services on top of. India's DPI is popularly called the "India Stack", conceptualised across three layers:
| Layer | Function | Examples |
|---|---|---|
| Identity layer | Verifiable digital identity | Aadhaar, e-KYC |
| Payments layer | Real-time digital payments | UPI (Unified Payments Interface) |
| Data layer | Consent-based data sharing | DigiLocker, Account Aggregator |
DigiLocker sits in the data/empowerment layer. Aadhaar — the 12-digit unique identity issued by the UIDAI (Unique Identification Authority of India, established 2009, given statutory backing by the Aadhaar Act, 2016) — anchors the identity layer, while UPI, built by the National Payments Corporation of India (NPCI) and launched in 2016, dominates the payments layer and now processes well over a billion transactions a day. The Account Aggregator framework and the consent layer (often called DEPA — Data Empowerment and Protection Architecture) complete the data layer alongside DigiLocker. The India Stack is internationally cited as a model of how DPI can drive financial inclusion (the JAM trinity — Jan Dhan accounts, Aadhaar, Mobile — is the backbone of this) and efficient public-service delivery at population scale. India used its 2023 G20 presidency to promote DPI as an export, even setting up a Global DPI Repository for other countries to adopt — a recurring theme in governance current affairs and one that connects to the workings of constitutional bodies that oversee elections, identity and service delivery.
"Family ID" and Targeted Welfare — Plus the Data-Protection Angle
A "Family ID" is a household-level unique identifier that links members of a family into a single verified record. Its purpose is to enable targeted, proactive welfare delivery — once the state knows a household's verified composition, income and eligibility, it can deliver benefits through Direct Benefit Transfer (DBT) automatically, reduce duplication and leakage, and even proactively offer schemes the family qualifies for rather than waiting for an application. State implementations include Haryana's Parivar Pehchan Patra, MP's Samagra and Rajasthan's Jan Aadhaar.
The flip side is data protection. Aggregating household data on a central platform raises privacy concerns, which is why the consent-based two-way model matters — citizens choose to pull or enrol. This must be read alongside the Digital Personal Data Protection (DPDP) Act, 2023, India's first comprehensive data-protection law, which is built on principles of consent, purpose limitation and data minimisation and introduces the concepts of the Data Principal (the individual), the Data Fiduciary (who decides how data is processed) and a Data Protection Board of India to enforce the rules. For exams, remember the chain: DigiLocker (2015) → IT Act legal validity (2016 Rules) → DPDP Act (2023) consent framework. The statutory architecture for oversight links to our notes on statutory commissions.
The Privacy Right and the Constitutional Backdrop
The data-protection conversation rests on a landmark of Indian constitutional law that examiners frequently fold into governance questions: the Supreme Court's 2017 verdict in Justice K.S. Puttaswamy (Retd.) v. Union of India, a nine-judge bench ruling that declared the Right to Privacy a fundamental right under Article 21 (right to life and personal liberty). That judgment is precisely why a law like the DPDP Act became constitutionally necessary, and it set the "proportionality" test that any state intrusion into privacy must satisfy. It also shaped how Aadhaar may be used — a later 2018 ruling upheld Aadhaar's validity but reined in private-sector mandatory use. For aspirants, the linkage to lock is: Puttaswamy (2017, privacy as a fundamental right) → DPDP Act (2023, the statutory framework), with Family IDs and DigiLocker as the live application where the consent principle is operationalised.
DBT, Welfare Targeting and the Efficiency Dividend
The ultimate purpose of wiring Family IDs into DPI is sharper welfare targeting. The Direct Benefit Transfer (DBT) mechanism, launched in 2013, routes subsidies and benefits straight into beneficiaries' Aadhaar-seeded bank accounts, cutting out intermediaries. The flagship proof of concept was PAHAL (DBTL) for LPG subsidies, which along with broader DBT is officially credited with saving lakhs of crores of rupees by eliminating duplicate, fake and "ghost" beneficiaries. A verified household record (the Family ID) takes this further: the state can move from reactive delivery (citizen applies) to proactive, "whole-of-government" or saturation delivery (the system auto-identifies eligible families and pushes benefits). This connects to the governance buzzwords examiners like — minimum government, maximum governance, last-mile delivery and plugging leakages — and to schemes built on this plumbing, from PM-KISAN to subsidised foodgrain under the National Food Security Act. The efficiency dividend, however, must be balanced against inclusion errors (genuine beneficiaries wrongly excluded due to authentication failures), which is the standard critique a balanced answer should mention.
🎯 Practice MCQs
Q1. DigiLocker was launched in which year under the Digital India programme? (a) 2009 (b) 2012 (c) 2015 (d) 2019 → (c) — DigiLocker was launched in 2015.
Q2. Documents issued via DigiLocker are legally at par with originals under rules framed under which Act? (a) RTI Act, 2005 (b) IT Act, 2000 (c) Aadhaar Act, 2016 (d) DPDP Act, 2023 → (b) — Under the 2016 Digital Locker Rules framed under the IT Act, 2000.
Q3. In the India Stack, which component forms the real-time payments layer? (a) Aadhaar (b) UPI (c) DigiLocker (d) Account Aggregator → (b) — UPI is the payments layer; Aadhaar is identity and DigiLocker is the data layer.
Q4. India's first comprehensive data-protection law is the: (a) IT Act, 2000 (b) RTI Act, 2005 (c) DPDP Act, 2023 (d) Aadhaar Act, 2016 → (c) — The Digital Personal Data Protection Act, 2023.
Q5. A "Family ID" primarily enables which of the following? (a) Issuing passports (b) Targeted, proactive welfare delivery via DBT (c) Filing income tax returns (d) Voter registration → (b) — A household-level ID enables targeted welfare and Direct Benefit Transfer.
Q6. In the Justice K.S. Puttaswamy case (2017), the Supreme Court held that the Right to Privacy is a fundamental right under which Article? (a) Article 14 (b) Article 19 (c) Article 21 (d) Article 32 → (c) — A nine-judge bench located the right to privacy within Article 21 (right to life and personal liberty).
Q7. Aadhaar is issued by which authority, given statutory backing by the Aadhaar Act, 2016? (a) NPCI (b) UIDAI (c) NeGD (d) TRAI → (b) — The Unique Identification Authority of India (UIDAI) issues Aadhaar.
Q8. The "JAM trinity" that underpins Direct Benefit Transfer stands for: (a) Jan Dhan, Aadhaar, Mobile (b) Jobs, Agriculture, Manufacturing (c) Justice, Accountability, Mobility (d) Jan Aushadhi, Aadhaar, MGNREGA → (a) — Jan Dhan bank accounts, Aadhaar identity and Mobile connectivity form the JAM trinity.
📋 How this gets asked (PYQ pattern)
CDS governance and science-and-technology questions test flagship digital initiatives (DigiLocker, UPI, Aadhaar, Digital India) with their launch years and administering body (MeitY/NeGD for DigiLocker, UIDAI for Aadhaar, NPCI for UPI), and the legal validity angle of digital documents. The India Stack's three layers, the JAM trinity, and the DPDP Act, 2023 as India's first data-protection law (with its Data Principal/Data Fiduciary/Data Protection Board vocabulary) are frequent one-liners. The Puttaswamy (2017) privacy-as-fundamental-right ruling under Article 21 is a high-value polity crossover. A recurring angle is DBT and targeted welfare (the 2013 launch, PAHAL/LPG, savings from eliminating ghost beneficiaries) as instruments of efficient, leak-proof delivery. The fresh 2026 hook is state Family IDs being onboarded onto DigiLocker with the consent-based two-way model. Anchor your prep on the institution-year-ministry facts rather than fabricated past-paper citations.
Digital governance is a fast-growing CDS/OTA scoring area. Stay updated with CDS/OTA Current Affairs and build your GK foundation with expert mentors at Cavalier's upcoming courses in Delhi.
✍️ Written by Aditya Tiwari — Defence current-affairs & GK faculty at The Cavalier. Reviewed by the Cavalier Faculty Desk. The Cavalier has trained NDA/CDS/SSB aspirants since 2001 (Facebook · YouTube). Source: MeitY PIB release, 17 June 2026 (PRID 2273958). Facts cross-verified.