Introduction

India has built one of the world's most sophisticated Digital Public Infrastructure (DPI) ecosystems — a set of open, interoperable, shared digital rails that underpin financial inclusion, identity verification, and e-commerce at population scale. From Aadhaar's 1.44 billion enrolments to UPI's 21+ billion monthly transactions (January 2026), India's DPI has become a global model. The International Monetary Fund (IMF) recognised UPI as the world's largest retail fast-payment system by transaction volume in June 2025, accounting for approximately 49% of global real-time payment transactions. The G20 New Delhi Declaration (2023) explicitly endorsed DPI as a development tool, with India leading the initiative. This is a high-relevance topic for UPSC GS Paper III (Technology, Economic Development).


What is Digital Public Infrastructure (DPI)?

DPI refers to foundational digital systems built on open standards that:

  • Are interoperable — multiple private/public actors can plug in
  • Are inclusive — accessible to all citizens regardless of economic status
  • Operate as shared rails — like roads, but for data and transactions
  • Enable innovation at the edges — private actors build services on top

Three-layer DPI model (UN/World Bank framework):

  1. Identity — digital ID systems (e.g., Aadhaar)
  2. Payments — real-time retail payment systems (e.g., UPI)
  3. Data exchange — consent-based data sharing (e.g., Account Aggregator)

India Stack: The Four Layers

India Stack is the collection of open APIs and digital infrastructure built by the Government of India and NPCI that enables developers and institutions to build services at scale. The term was coined by iSPIRT (Indian Software Product Industry Round Table).

LayerComponentPurposeScale
Identity (Presence-less)Aadhaar (UIDAI)Digital identity; biometric authentication without physical documents1.4 billion+ enrolments
Cashless (Payments)UPI, BBPS, AePSReal-time interoperable digital payments228+ billion transactions in CY2025
Paperless (Documents)DigiLocker, eSignDigital document storage and electronic signatures67.63 crore users (March 2026); 950+ crore documents
Consent (Data)Account Aggregator (AA)Controlled sharing of financial data with explicit user consent2.61 billion accounts enabled
HealthABDM (Ayushman Bharat Digital Mission)Digital health records, health IDsRolled out from 2021

Why India Stack Matters for UPSC

India Stack is a frequent topic in both Prelims (factual questions on Aadhaar, UPI, DigiLocker) and Mains (essays on digital governance, financial inclusion, DPI as a global model). As of February 2026, India has signed agreements with 23 countries to share its DPI model.


Aadhaar: The Identity Foundation

Administered by: Unique Identification Authority of India (UIDAI), established under the Aadhaar Act 2016

Key statistics (2025–26):

  • Total enrolments: Over 1.44 billion / 144.47 crore (UIDAI dashboard, March 2026; approximately 99% of India's adult population)
  • Authentication transactions: 231 crore (2.31 billion) in November 2025 — up 8.47% YoY (UIDAI press release, November 2025); e-KYC transactions jumped 24% YoY in November 2025
  • Registered enrolment stations: 2,39,413

How Aadhaar works:

  • Stores biometric data (fingerprints, iris scans) and demographic data (name, address, date of birth)
  • Issues a 12-digit unique number
  • Authentication API: Any authorised entity can verify whether a person is who they claim to be
  • e-KYC: Digital Know-Your-Customer using Aadhaar authentication — eliminates paper-based KYC

Policy debates:

  • Privacy: Supreme Court in Justice K.S. Puttaswamy vs Union of India (2018) upheld Aadhaar's constitutional validity while restricting its use by private entities
  • Exclusion errors: Biometric failures (elderly, manual labourers) have caused denial of welfare benefits
  • Data security: Centralised biometric database — potential for mass surveillance

UPI: Unified Payments Interface

Operator: National Payments Corporation of India (NPCI) Launched: 11 April 2016

How UPI Works

UPI is a real-time payment system that allows Person-to-Person (P2P) and Person-to-Merchant (P2M) transactions 24x7x365 via:

  • Virtual Payment Address (VPA / UPI ID: e.g., name@bank)
  • Mobile number linked to bank account
  • QR code scan

Multiple bank accounts can be linked to a single UPI app. Settlement happens in real-time through IMPS (Immediate Payment Service) infrastructure. As of 2024, UPI had approximately 491 million users and 65 million merchants.

Key UPI Statistics

MetricFigure
Monthly transactions (January 2026)21.7 billion (all-time high)
Monthly transactions (December 2025)21.63 billion
Full year 2025 volume228.3 billion transactions (calendar year Jan–Dec 2025)
Full year 2025 value₹299.7 lakh crore
FY 2025-26 annual volume241.62 billion (24,162 crore) transactions (FY April 2025 – March 2026)
FY 2025-26 value₹314 lakh crore
Banks live on UPI703 banks (FY26 end; up from 44 in FY 2016-17)
March 2026 monthly transactions22.6 billion (monthly record; P2M share: 63% of total volume)
Year-on-year volume growth (2024→2025)32.5% (calendar year)

UPI Transaction Data (Year-wise)

YearVolume (Billion Transactions)Value (Lakh Crore Rs)
202022.341.0
202138.771.5
202274.0125.9
2023117.6182.8
2024172.2246.8
2025228.3299.7
FY 2025-26241.62314.0

Note: 2020–2025 rows are calendar year (Jan–Dec); FY 2025-26 row is financial year (Apr–Mar).

UPI Market Share

PhonePe and Google Pay together dominate approximately 85% of UPI transactions, with Paytm, CRED, and other apps sharing the remaining market.

UPI Variants

VariantFeatureTarget Segment
UPI 123PAYIVR/feature phone-based UPI without internetRural/non-smartphone users
UPI LiteOn-device wallet for small offline transactions (up to ₹500 per transaction)Low-value, high-frequency transactions
UPI One WorldFor foreign visitors — prepaid wallets without Indian bank accountInbound tourism, G20 delegates
UPI Credit LineAccess credit lines (overdraft/credit cards) via UPIFormal credit access

International UPI

UPI has been extended to cross-border payments:

CountryIntegration PartnerStatus
SingaporePayNowLive; 8,000+ merchants
UAENIOPAYLive
FranceFirst European country; live at Eiffel Tower, Galeries Lafayette (July 2024)
Sri LankaLankaPay, DialogLive at tourist zones
BhutanRoyal Monetary AuthorityLive
NepalNepal Rastra BankLive
MauritiusMauCASLive
QatarLive

Cross-border UPI transaction volumes grew over 20 times — from 37,060 in FY24 to over 7,55,000 in FY25. Project Nexus (BIS): Links India's UPI with payment systems of Singapore, Malaysia, Philippines, Thailand.


Other Digital Payment Systems

RuPay

RuPay is India's indigenous card payment network launched by NPCI in 2012. It operates as a domestic alternative to Visa and Mastercard, with significantly lower merchant discount rates. RuPay cards are issued under the Pradhan Mantri Jan Dhan Yojana (PMJDY), making them the backbone of financial inclusion through debit cards.

BHIM (Bharat Interface for Money)

Launched in December 2016, BHIM is a UPI-based payment app developed by NPCI. It was designed to promote digital payments among first-time users, especially in rural and semi-urban areas. Note: BHIM is one app that uses UPI; UPI is the underlying protocol.

AePS (Aadhaar-enabled Payment System)

AePS allows Aadhaar-linked bank account holders to perform basic banking transactions — cash withdrawal, balance inquiry, fund transfer — through a micro-ATM using biometric authentication. It is especially significant for last-mile financial inclusion in areas without ATMs or bank branches.

NETC FASTag

The National Electronic Toll Collection (NETC) system enables automatic toll payments through FASTags. FASTag was made mandatory for all vehicles from 15 February 2021, significantly reducing waiting times at toll plazas and improving highway logistics.

BBPS (Bharat Bill Payment System)

An interoperable bill payment system operated by NPCI, allowing consumers to pay utility bills, insurance premiums, loan EMIs, and other recurring payments through a single platform.


DigiLocker: Paperless Documents

Launched: 2015 by Ministry of Electronics and Information Technology (MeitY)

Key statistics (2025–26):

  • Registered users: Over 67.63 crore (March 2026)
  • Documents issued: Over 950 crore documents
  • Active issuers: 1,936+

What DigiLocker does:

  • Stores government-issued documents (driving licence, vehicle registration, academic certificates, Aadhaar card, PAN card, insurance) in cloud
  • Documents have the same legal validity as originals under the IT Act
  • Used for DigiYatra (face-recognition airport boarding) and FASTag-linked vehicle verification

Integration with governance:

  • Court cases where DigiLocker documents accepted as evidence
  • School admissions, job applications, bank KYC — paperless processes enabled

Account Aggregator (AA) Framework

Regulator: Reserve Bank of India (RBI) — Master Direction issued 2016; operationalised from September 2021 Self-regulatory body: Sahamati (industry collective)

What it does: Account Aggregators (AAs) are a new class of NBFCs licensed by the RBI. They facilitate consent-based sharing of financial data between Financial Information Providers (FIPs — banks, insurance companies, mutual funds) and Financial Information Users (FIUs — lenders, wealth managers).

Key features:

  • Consent-based: No data moves without explicit, informed, revocable consent of the customer
  • Data blind: AAs cannot read, store, or use the data they transfer — they are merely a pipeline
  • Interoperable: Any FIP can share data with any FIU through any AA

Key statistics (early 2026):

  • Financial Information Providers (FIPs) and Users (FIUs) live: 126 institutions
  • Financial accounts enabled for AA sharing: Over 2.61 billion
  • Licensed Account Aggregators: 17 companies (e.g., OneMoney, CAMSfinserv, Perfios AA, Finvu)
  • Individuals consented: Approximately 70 million, with ~10 million new consents monthly

Why it matters:

  • Enables cash-flow-based lending to MSMEs and individuals who lack collateral
  • Eliminates the need to share physical bank statements — reduces fraud
  • Foundation for Open Credit Enablement Network (OCEN): GST invoice-based, AA-linked lending for small businesses

ONDC: Open Network for Digital Commerce

Full form: Open Network for Digital Commerce Nature: Section 8 (not-for-profit) company under the Department for Promotion of Industry and Internal Trade (DPIIT) Incorporated: December 2021 Protocol: Based on Beckn Protocol — open-sourced, platform-agnostic Pilot launch: 29 April 2022 (five cities: Delhi NCR, Bhopal, Bengaluru, Shillong, Coimbatore) Public beta: 30 September 2022 (Bangalore Urban) Founding members: Quality Council of India, Protean eGov Technologies Ltd

What Problem Does ONDC Solve?

Traditional e-commerce (Amazon, Flipkart) operates as closed platforms — sellers must list on each platform separately; platforms control discovery, pricing, and logistics. ONDC creates an open, interoperable network where any buyer app can discover any seller on any seller app — like how email works across Gmail and Yahoo.

ONDC vs Traditional Platforms

FeatureTraditional PlatformsONDC
ArchitectureClosed, proprietary ecosystemOpen, interoperable network
Seller accessMust register on each platform separatelyRegister once, discoverable across all ONDC apps
Buyer appsPlatform-specific (Amazon app, Flipkart app)Multiple buyer-side apps (Paytm, Magicpin, etc.)
CommissionHigh platform fees (15–40%)Lower network charges
Data ownershipPlatform owns customer dataSeller retains customer data

Significance for inclusion: Small kirana stores and local artisans can sell online without listing on Amazon or Flipkart. Reduces platform dependency and commissions. Integrated with GSTN for tax compliance. Domains covered: retail (grocery, food), mobility (ride-hailing), logistics, hospitality, healthcare, and financial services.


CBDC: Central Bank Digital Currency (e-Rupee)

Issuer: Reserve Bank of India

A Central Bank Digital Currency (CBDC) is a digital form of fiat money issued by the central bank. Unlike cryptocurrency, a CBDC is legal tender, backed by the sovereign, and has the same value as physical currency.

Pilot Timeline

SegmentNameLaunch DateUse Case
Wholesale (e₹-W)Digital Rupee — Wholesale1 November 2022Settlement of secondary market transactions in government securities
Retail (e₹-R)Digital Rupee — Retail1 December 2022Person-to-person and person-to-merchant payments

Retail CBDC (e₹-R) Details

  • Technology: Based on blockchain (distributed ledger technology)
  • Form: Digital tokens in the same denominations as physical currency
  • Pilot banks (Phase 1): SBI, ICICI Bank, Yes Bank, IDFC First Bank
  • Pilot banks (Phase 2): Bank of Baroda, Union Bank of India, HDFC Bank, Kotak Mahindra Bank
  • Initial cities: Mumbai, New Delhi, Bengaluru, Bhubaneswar, Chandigarh
  • Milestone: RBI achieved 1 million daily transactions on retail CBDC on 27 December 2023

CBDC vs Cryptocurrency vs UPI

ParameterCBDC (e₹)CryptocurrencyUPI
IssuerRBI (Central Bank)Decentralized (no issuer)NPCI (facilitator); banks settle
Legal tenderYesNo (not legal tender in India)Transfers existing legal tender
BackingSovereign guaranteeMarket-determined valueBank deposits
VolatilityNone (1 e₹ = 1 Rs)HighNone
TechnologyBlockchain-basedBlockchain-basedCentralised payment rails
AnonymityLimited (managed by RBI)Pseudo-anonymousKYC-linked
ProgrammabilityYes (potentially)LimitedLimited

CBDC Use Cases Being Piloted

  • Programmable payments (e.g., government subsidies that can only be spent on specific goods)
  • Cross-border settlements (RBI-CBUAE linkage)
  • Financial inclusion (offline CBDC for rural areas)

Open Credit Enablement Network (OCEN)

Purpose: Democratise credit access for MSMEs (63 million MSMEs in India — most lack collateral but have documented cash flows via GSTN)

Mechanism:

  1. Borrower shares GST invoice/Account Aggregator data with a lender
  2. Lender assesses creditworthiness based on cash flows (not collateral)
  3. Loan disbursed digitally; repayment monitored through AA

JAM Trinity — Jan Dhan, Aadhaar, Mobile

The JAM trinity is the convergence of three pillars that underpin India's financial inclusion and direct benefit transfer architecture:

PillarDetailsScale (2024)
Jan DhanPradhan Mantri Jan Dhan Yojana (PMJDY) — zero-balance bank accounts58.06 crore accounts (April 2026); Rs 3.07 lakh crore total deposits (April 2026); ~55% women account holders; ~63% in rural/semi-urban areas
Aadhaar12-digit unique biometric identity144.47 crore+ enrolments (March 2026, UIDAI dashboard)
MobileMobile phone connectivity119 crore+ subscribers (66.1 crore urban, 52.7 crore rural)

Impact on Direct Benefit Transfers (DBT)

The JAM trinity powers the Direct Benefit Transfer (DBT) mechanism:

  • Integrated 1,206 welfare schemes as of FY 2024-25
  • Transferred Rs 6.7 lakh crore in FY 2024-25 alone
  • Eliminated ghost beneficiaries and middlemen, with estimated cumulative savings of over Rs 3.48 lakh crore (government claim)
  • ₹7+ lakh crore in DBT transfers between 2014 and 2024

Updated JAM Trinity Scale (April 2026): PMJDY accounts: 58.06 crore (PIB, April 2026), total deposits ₹3.07 lakh crore; Aadhaar enrolments: 144.47 crore (UIDAI dashboard, March 2026).

How DBT Works:

  1. Beneficiary's Aadhaar is seeded with their Jan Dhan bank account
  2. Government transfers the benefit amount directly into the linked bank account
  3. Beneficiary receives SMS notification on mobile
  4. Cash can be withdrawn via AePS (micro-ATM) using biometric authentication

DPI is the technological superstructure built on the JAM foundation.


India's G20 DPI Framework (2023)

During India's G20 Presidency (2023), the G20 Framework for Systems of DPI was adopted:

  • Endorsed by all G20 nations in New Delhi Declaration (September 2023)
  • Estimates: DPI could create $1.25 trillion in economic value across Low and Middle Income Countries (LMICs) by 2030
  • India shared its DPI (Aadhaar, UPI, DigiLocker) as open-source models — "India Stack" offered globally
  • Modular Open Source Identity Platform (MOSIP): India's open-source identity platform deployed in 12+ countries
  • India has signed agreements with 23 countries to share its DPI model (as of February 2026)

Countries adopting India-style DPI elements:

  • UPI-like systems: Singapore (PayNow), Brazil (PIX), Ghana (GhIPSS), Nigeria (eNaira)
  • Digital ID: Philippines, Ethiopia (MOSIP-based), Bangladesh (Aadhaar-inspired)
  • G2P payment rails: Togo, Morocco

Cryptocurrency Regulation in India

Timeline of Key Developments

YearEvent
2013RBI issues first caution against virtual currencies
2018RBI circular prohibits regulated entities from dealing with crypto exchanges
2020Internet and Mobile Association of India v. RBI — Supreme Court quashes the RBI ban, holding the absolute prohibition was a "disproportionate measure"
2022Union Budget 2022-23 introduces: 30% flat tax on Virtual Digital Assets (VDAs) under Section 115BBH; 1% TDS on transfers under Section 194S; no set-off of losses against other income
2023Crypto exchanges and service providers brought under PMLA; must register with FIU-IND and comply with AML/KYC norms
2026No comprehensive crypto regulation bill enacted; crypto remains "taxed but unregulated"

India's Position at G20

During India's G20 presidency (2023), India pushed for a coordinated global framework for crypto regulation. The G20 New Delhi Leaders' Declaration endorsed the IMF-FSB Synthesis Paper, recommending a comprehensive regulatory approach rather than an outright ban.


RBI Digital Lending Guidelines (2022)

On 2 September 2022, the RBI issued comprehensive guidelines to regulate the digital lending ecosystem, based on the recommendations of a Working Group on Digital Lending (November 2021).

AreaRequirement
DisbursementAll loan amounts must be disbursed directly into the borrower's bank account — no pass-through or pool accounts of Lending Service Providers (LSPs)
Key Fact Statement (KFS)Borrowers must receive a standardized KFS before signing, containing APR, all fees, recovery mechanism, and cooling-off period
Data privacyLSPs cannot access mobile phone data beyond what is essential; only three categories of data permitted — name, contact details, and KYC information
Grievance redressalRegulated Entities (REs) and LSPs must appoint a nodal grievance redressal officer
Credit reportingAll digital loans must be reported to credit bureaus
First Loss Default Guarantee (FLDG)Capped at 5% of the loan portfolio
Cooling-off periodBorrowers have a look-up period to exit the loan without penalty

These guidelines brought the unregulated fintech lending space under RBI oversight, addressing concerns about predatory lending, usurious interest rates, coercive recovery practices, and misuse of personal data.


Data Privacy and Regulatory Framework

Digital Personal Data Protection Act (DPDP Act), 2023

The DPDP Act received Presidential assent on 11 August 2023. It establishes a comprehensive framework for digital personal data protection in India.

FeatureProvision
ApplicabilityAll digital personal data processed within India; also applies to processing outside India if related to offering goods/services to individuals in India
ConsentPersonal data may be processed only for a lawful purpose upon consent; consent may not be required for "legitimate uses" (voluntary sharing, State services)
Data Fiduciary obligationsMaintain accuracy, keep data secure, delete data once purpose is met
Significant Data FiduciariesMust appoint a Data Protection Officer and an independent data auditor
Rights of Data PrincipalsRight to information, correction, erasure, and grievance redressal
Children's dataVerifiable parental/guardian consent required; behavioral monitoring and targeted advertising directed at children are banned
PenaltiesUp to Rs 250 crore for non-compliance; up to Rs 200 crore for failure to notify breaches or breach of child-related obligations
Data Protection BoardEstablished under Section 18 to adjudicate complaints and disputes

Tension with Aadhaar: Aadhaar's centralised biometric database raises concerns under DPDP Act — ongoing regulatory dialogue.

FATF and Virtual Digital Assets

India is a FATF member; amended PMLA (Prevention of Money Laundering Act) in 2023 to bring Virtual Digital Assets (VDAs — crypto assets) and exchanges under anti-money laundering regulations. VDA exchanges must register with FIU-IND and follow KYC/AML norms.


Fintech Ecosystem Overview

India's fintech ecosystem spans multiple verticals:

VerticalKey Players/PlatformsRegulatory Framework
PaymentsPhonePe, Google Pay, Paytm, CREDRBI; NPCI
Digital lendingKreditBee, MoneyTap, NaviRBI Digital Lending Guidelines 2022
Insurance (Insurtech)Digit, Acko, PolicyBazaarIRDAI
Wealth managementZerodha, Groww, KuveraSEBI
Neo-bankingFi, Jupiter, NiyoRBI (through partner banks)
Embedded financeBaaS (Banking-as-a-Service) providersRBI

Challenges to India's DPI

ChallengeDetail
Digital divide700+ million internet users but ~900 million mobile connections — rural-urban gap; gender gap (women's internet access 40% lower than men)
Data privacyDPDP Act 2023 — DPDP Rules 2025 notified 13 November 2025 (phased rollout: full compliance from May 2027); Aadhaar biometric data centralisation risks
CybersecurityUPI fraud, phishing, SIM-swap attacks growing — RBI reported 6.94 lakh cyber fraud cases in FY24
Interoperability gapsONDC still early-stage; UPI merchant adoption uneven in rural areas
Algorithmic exclusionAA credit scoring may perpetuate existing inequalities
CBDC adoptionLow retail uptake of e-Rupee — behavioural barriers, limited merchant acceptance
Predatory lendingFintech lending apps — addressed partly by RBI Digital Lending Guidelines 2022

Cross-paper relevance

  • GS3 — Indian Economy (primary) — India Stack, UPI statistics, ONDC, Account Aggregator, CBDC (e-Rupee), fintech ecosystem, DPDP Act 2023
  • GS2 — Governance: Digital Public Infrastructure as governance tool, DBT, e-Governance, data protection
  • GS3 — Science & Technology — Digital payments innovation, open-source technology in public systems
  • Essay — "India's Digital Public Infrastructure: a model for the Global South"; "Fintech: financial inclusion or financial disruption?"

Recent Developments (2024–2026)

UPI — DPI Diplomacy and the Global Fast-Payment Benchmark

UPI transaction data, year-wise growth, and international country list are in the static sections above. The analytical dimension worth framing separately is DPI diplomacy — how India has weaponised UPI's success as soft power.

The Project Nexus (BIS-linked) initiative — connecting UPI with Singapore (PayNow), Malaysia, Philippines, and Thailand fast-payment systems — represents a shift from bilateral UPI-country agreements to a multilateral payment network. If Project Nexus operationalises at full scale, it would enable a South-East Asian + South Asian payments corridor where India is the hub. This has strategic significance beyond pure economics: reducing dependence on SWIFT and USD-denominated intermediaries for intra-regional trade payments.

The G20 DPI track (India's G20 Presidency, 2023) converted UPI from a domestic success story into a diplomatic instrument. India offered India Stack (including MOSIP for identity, UPI for payments, DigiLocker for documents) as open-source public goods to developing nations. The estimated $1.25 trillion in economic value (G20 DPI framework estimate) for LMICs is India's foreign policy pitch: "We built this, you can use this blueprint." Agreements with 23 countries to share DPI by February 2026 represent a new form of development cooperation — technology partnership replacing traditional ODA.

UPSC angle: UPI's 49% share of global real-time transactions (IMF), Project Nexus (BIS), DPI-as-diplomacy (23 country agreements, India Stack offered as open-source), and India's DPI export strategy are Mains GS3 topics on technology, international relations, and trade policy — far beyond the raw transaction numbers.

ONDC — Open Network for Digital Commerce (2024-25 Scale-Up)

The Open Network for Digital Commerce (ONDC) — a government initiative launched in 2022 to decentralise e-commerce by creating an open protocol (like UPI for digital payments) — crossed 1 crore (10 million) transactions per month in mid-2024, reaching approximately 1.4 crore transactions in October 2024 (festive season peak). Monthly volumes moderated to approximately 75 lakh (7.5 million) in February 2025, reflecting a shift in transaction mix: mobility (ride-hailing via Namma Yatri) now accounts for ~56% of ONDC transactions while retail orders contracted (ONDC Open Data, February 2025). Cumulative transactions since inception: approximately 68 million. Over 7.5 lakh sellers have onboarded (MSMEs, kirana stores, farmers) across mobility, food delivery, grocery, and B2B segments.

ONDC's significance is disruptive: it allows any buyer app and seller app to interoperate, preventing platform monopolies (like Amazon/Flipkart duopoly). The government is pursuing ONDC adoption in government procurement (GeM), agriculture marketing (e-NAM integration), and logistics (NLP 2022 integration). ONDC is being positioned as India's DPI export to developing nations.

UPSC angle: ONDC's open-protocol model (contrasted with closed e-commerce platforms), its MSME empowerment potential, and India's strategy of "exporting DPI" to the Global South are important Mains GS3 angles on digital economy and trade policy.

DPDP Act 2023 — Data Protection Framework Operationalised

The Digital Personal Data Protection (DPDP) Act, 2023 (enacted 11 August 2023) was operationalised through DPDP Rules 2025, notified on 13 November 2025. Implementation is phased: Data Protection Board of India established immediately (13 Nov 2025); Consent Manager registration framework effective 13 November 2026; full compliance obligations (notice/consent standards, security safeguards, breach notification, data erasure rights) effective 13 May 2027 (18 months from notification). Key provisions: Data Fiduciary (entity determining purpose) must take explicit consent from Data Principals; Data Protection Board adjudicates disputes; penalties up to Rs. 250 crore per violation; Significant Data Fiduciaries classification for large-scale processors; cross-border data transfer restrictions (notification pending).

The DPDP Act replaces the Personal Data Protection Bill (2019) that was withdrawn. Its implementation affects all DPI elements: Aadhaar data sharing, Account Aggregator consents, health data on ABHA (Ayushman Bharat Health Account), and government DBT processes. The consent framework for Account Aggregator is directly shaped by DPDP provisions.

UPSC angle: DPDP Act 2023 (passed August 2023), Data Protection Board, Rs. 250 crore penalty cap, Data Fiduciary vs Data Principal vs Data Processor — are Prelims facts. The tension between government data use for welfare schemes and privacy rights is a Mains GS2 (Fundamental Rights) + GS3 (Digital Economy) overlap question.

CBDC e-Rupee — Pilot Expanded to 7 Million Users, 19 Banks (October 2025)

The RBI's digital rupee (e₹) pilot — launched as wholesale (1 November 2022) and retail (1 December 2022) — expanded significantly: by March 2025, the retail e₹ pilot covered 17 banks and ~6 million users, with e-rupee in circulation at Rs. 1,016 crore (~$120 million) — a 334% increase from March 2024. By October 2025, the pilot expanded to 19 banks and 7 million users. The RBI added programmable payment use cases in August 2024 (purpose-bound funds for fuel, groceries, education, healthcare), and offline NFC-based transactions by late 2024.

Despite the pilot expansion, retail adoption remains modest compared to UPI's 491 million users — highlighting the challenge of behavioural change and merchant onboarding. The RBI is exploring CBDC for cross-border wholesale payments (e₹-W for G20 CBDC interoperability exercises) and linking it to India's FasTag/toll payment systems.

UPSC angle: e₹ pilot status (19 banks, 7 million users as of October 2025, Rs. 1,016 crore in circulation as of March 2025), programmable CBDC feature, offline NFC transactions, and the wholesale vs retail CBDC distinction remain high-priority Prelims and Mains facts.


Exam Strategy

High-frequency UPSC themes from this chapter:

  • India Stack layers — Prelims MCQs test which component belongs to which layer (Identity/Payments/Data/Health)
  • UPI statistics — 21+ billion monthly transactions, 228.3 billion for full year 2025
  • CBDC launch dates — Wholesale (1 November 2022) vs Retail (1 December 2022) distinction; 1 million daily transaction milestone (27 December 2023)
  • Account Aggregator — RBI-regulated NBFC; 2.61 billion accounts enabled; data blind (AA cannot read the data)
  • ONDC — distinguish from UPI; it is an e-commerce network, not a payments network; based on Beckn Protocol
  • G20 DPI Framework — India's global contribution; $1.25 trillion opportunity estimate; 23 countries signed agreements
  • JAM Trinity — Jan Dhan + Aadhaar + Mobile; 1,206 schemes; Rs 6.7 lakh crore DBT in FY25
  • DPDP Act 2023 — penalties up to Rs 250 crore; Data Protection Board; children's data protections

For Mains (GS3 answer writing):

  • Structure: DPI concept → India Stack → specific component → impact → challenges → way forward
  • Link DPI to financial inclusion (JAM Trinity), MSME credit (OCEN), and governance (DBT via Aadhaar-seeded accounts)
  • Use the phrase "consent-based data economy" — it captures AA's distinctive architecture
  • Common Mains questions:
    • "India's Digital Public Infrastructure has become a model for the Global South." Discuss with reference to India Stack and UPI.
    • Critically examine the regulatory challenges posed by cryptocurrencies in India.
    • How has the JAM trinity transformed the delivery of government welfare schemes?
    • Evaluate the impact of the DPDP Act, 2023 on the fintech ecosystem in India.

Common mistakes to avoid:

  • UPI is not the same as BHIM — BHIM is one app that uses UPI; UPI is the underlying protocol
  • NPCI ≠ RBI — NPCI operates UPI; RBI issues CBDC
  • ONDC is not a government app — it is a network protocol standard (like HTTP for the internet)
  • CBDC is not cryptocurrency — CBDC is sovereign-issued legal tender; crypto is decentralised and not legal tender in India

Key Terms

Account Aggregator Framework

  • Definition: The Account Aggregator (AA) Framework is India's RBI-regulated, consent-based digital infrastructure that lets individuals and businesses securely share their financial data across institutions through licensed intermediaries called NBFC-Account Aggregators, who transmit data but cannot view, store, or use it.
  • Context: The framework was created by the RBI through its Master Direction on NBFC-Account Aggregators issued on 2 September 2016, which carved out a new class of non-banking financial company whose sole business is consent-based data intermediation. The live ecosystem was formally launched on 2 September 2021 with the onboarding of major banks. It operates as the financial-sector implementation of the Data Empowerment and Protection Architecture (DEPA), conceptualised by NITI Aayog (draft released August 2020), and is supported by Sahamati, the industry alliance that coordinates participants. It is widely treated as a layer of India Stack and a key piece of the country's Digital Public Infrastructure (DPI).
  • UPSC Relevance: This is a foundational GS3 concept under the economy and science-and-technology heads — it underpins questions on digital financial inclusion, fintech, India's Digital Public Infrastructure (India Stack, UPI, DEPA), and data privacy. In Prelims it can appear as a factual item on which regulator licenses AAs (RBI) and the four sectoral regulators whose entities participate (RBI, SEBI, IRDAI, PFRDA). In Mains GS3, it links to credit access for MSMEs, financial inclusion, and the data-empowerment-versus-data-protection debate alongside the Digital Personal Data Protection Act, 2023.

Open Network for Digital Commerce (ONDC)

  • Definition: The Open Network for Digital Commerce (ONDC) is a government-backed open, interoperable e-commerce network that "unbundles" online retail by letting any compliant buyer app and seller app transact with each other, built on the open-source Beckn Protocol rather than a single closed platform.
  • Context: ONDC is an initiative of the Department for Promotion of Industry and Internal Trade (DPIIT), Ministry of Commerce and Industry. It was incorporated as a Section 8 (not-for-profit) company on 31 December 2021, with the Quality Council of India and Protean eGov Technologies Limited as founding members, and launched its pilot on 29 April 2022 across five cities (Delhi, Bengaluru, Bhopal, Shillong and Coimbatore). The model is often compared to UPI: just as UPI made payments interoperable across apps, ONDC aims to make discovery, ordering and fulfilment interoperable across e-commerce apps, so that small sellers and kirana stores are not locked into a single platform.
  • UPSC Relevance: ONDC is a high-yield GS3 topic under the digital economy, MSME empowerment and inclusive growth sub-heads, and overlaps with GS2 (government interventions, anti-monopoly/consumer welfare). No direct PYQ exists on ONDC by name; it is a foundational concept underpinning questions on the digital economy, e-commerce regulation, Digital Public Infrastructure (DPI) and India's "techade" stack (Aadhaar-UPI-ONDC). Prelims could test factual recall (nodal body DPIIT, Beckn Protocol basis, non-profit Section 8 structure); Mains can frame it as a tool to democratise digital commerce and reduce platform monopoly. Aspirants should link it to the India Stack/DPI narrative.

India Stack

  • Definition: India Stack is a set of open Application Programming Interfaces (APIs) and digital public infrastructure (DPI) built around a unique digital identity, that lets governments, businesses, startups and developers deliver presence-less, paperless and cashless services at population scale. It is organised into four layers — Identity (Aadhaar), Payments (UPI/AePS), Paperless (DigiLocker, eSign) and Consent/Data (Account Aggregator).
  • Context: The term "India Stack" was coined by the volunteer think-tank iSPIRT (Indian Software Product Industry Round Table) to brand a layered stack of government-backed digital systems, each governed by separate bodies (UIDAI for Aadhaar, NPCI for UPI, RBI for Account Aggregators). It builds on the JAM trinity — Jan Dhan bank accounts, Aadhaar and Mobile — which powers Direct Benefit Transfer (DBT). Aadhaar now covers around 1.4 billion residents, and UPI, launched by NPCI on 11 April 2016, has become the world's largest real-time retail payments system. India Stack is widely cited internationally as a model for Digital Public Infrastructure.
  • UPSC Relevance: India Stack is a foundational GS3 concept under "Indian economy — mobilisation of resources, growth, development" and "science & technology / digital infrastructure," and also touches GS2 (governance, DBT, transparency, reducing leakages). Prelims testing typically targets factual recall — which agency runs which layer (UIDAI/NPCI/RBI), the four layers, and the JAM trinity. Mains questions usually probe how DPI advances financial inclusion, plugs welfare leakages and serves as a model of digital governance. No verified PYQ exists for the exact term "India Stack"; treat it as a foundation concept that underpins questions on digital payments, financial inclusion, DBT and e-governance.

Unified Payments Interface (UPI)

  • Definition: The Unified Payments Interface (UPI) is a real-time, interoperable mobile payment system developed by the National Payments Corporation of India (NPCI) under the oversight of the Reserve Bank of India (RBI), which lets users instantly transfer money between any two bank accounts through a single mobile app using a virtual payment address (UPI ID), without sharing bank-account details.
  • Context: UPI was launched on 11 April 2016 by NPCI, building on the Immediate Payment Service (IMPS) infrastructure, to create a single layer that links multiple bank accounts within one mobile application. Its open, interoperable architecture allows any participating bank or third-party app (such as PhonePe, Google Pay, Paytm and BHIM) to plug in, enabling round-the-clock instant payments. UPI is a flagship component of India's Digital Public Infrastructure (DPI) stack and has become the backbone of the country's retail digital-payment ecosystem. In June 2025 the IMF recognised it as the world's largest retail fast-payment system by transaction volume.
  • UPSC Relevance: UPI is a foundational concept for GS3 (Indian economy — mobilisation of resources, banking, e-governance and the digital economy) and connects to GS2 themes on financial inclusion and Digital Public Infrastructure. In Prelims, expect factual questions on the regulator (RBI), the operator (NPCI), the launch year (2016) and how UPI differs from NEFT/RTGS/IMPS. In Mains, it features in answers on cashless economy, formalisation, financial inclusion, fintech regulation, and India's DPI diplomacy. No verified UPI-specific PYQ is cited here; the concept underpins the broader question family on digital payments, financial inclusion and e-governance.