India’s Criminal Procedure Identification bill passed in parliament last week and is raising concerns about government snooping.

The law requires those arrested or detained to provide biometric data (such as retina scans) and the government will retain this for up to 75 years.  In a country without data protection laws like the GDPR, this is making some people nervous.

Providing biometric data incident to arrest is nothing new in many countries.  In the US, for example, if you are arrested you will be fingerprinted and those prints merged into the FBI’s master file.  However, if you are not convicted, these prints are supposed to be removed, though you may have to go to court to do so.  Of course, there are many other ways you might voluntarily supply your prints – everything from applying for a concealed carry firearm license to getting a pilot’s license to applying to work in a school.

Fun fact: you can run a background check on yourself with the FBI by submitting your own prints.  See here.

India already collects fingerprints, photographs, and other basic biometric data (e.g., height, eye color, shoe size) at time of arrest.  Are retina scans more invasive than fingerprints?  I don’t know.  But what is concerning is that India is simply saying that all data will be required for essentially your lifetime.

As Vikram Singh, former police chief of Uttar Pradesh state, said: “You have enhanced the scope of the collection of samples but downgraded the control and supervisory mechanism.”  How will this data be used?  Who will have access?  India has been vague.

raindog308

Raindog308 is a longtime LowEndTalk community administrator, technical writer, and self-described techno polymath. With deep roots in the *nix world, he has a passion for systems both modern and vintage, ranging from Unix, Perl, Python, and Golang to shell scripting and mainframe-era operating systems like MVS. He’s equally comfortable with relational database systems, having spent years working with Oracle, PostgreSQL, and MySQL.

As an avid user of LowEndBox providers, Raindog runs an empire of LEBs, from tiny boxes for VPNs, to mid-sized instances for application hosting, and heavyweight servers for data storage and complex databases. He brings both technical rigor and real-world experience to every piece he writes.

Beyond the command line, Raindog is a lover of German Shepherds, high-quality knives, target shooting, theology, tabletop RPGs, and hiking in deep, quiet forests.

His goal with every article is to help users, from beginners to seasoned sysadmins, get more value, performance, and enjoyment out of their infrastructure.

You can find him daily in the forums at LowEndTalk under the handle @raindog308.