Code, Consent, and Constitutionalism: Governing India’s Digital Public Infrastructure

This paper critically examines India’s emerging Digital Public Infrastructure (DPI), exemplified by Aadhaar for digital identity, the Unified Payments Interface (UPI) for real-time payments, and the Open Network for Digital Commerce (ONDC) for open e-commerce, which has fundamentally transformed access to public and private services for over a billion people. These technological innovations are analysed through a rigorous constitutional lens, focusing specifically on the jurisprudential intersections of informational privacy, informed consent, and algorithmic governance. The study begins by situating India’s DPI within its broader socio-legal context, addressing both its unprecedented global scale and the attendant security and privacy challenges. Through doctrinal case studies, this paper evaluates Aadhaar’s constitutional litigation before the Supreme Court alongside its documented data vulnerabilities, UPI’s complex trade-offs between financial inclusion and transactional privacy, and ONDC’s promise of democratized commerce juxtaposed against its current governance ambiguities. These narratives illustrate the precise flashpoints where fundamental rights have been either upheld or infringed. Furthermore, the paper analyses the constitutional frameworks governing these digital infrastructures, exploring how Article 21’s guarantee of life and personal liberty encompasses the rights to privacy and dignity, and how Article 14’s mandate of equality and nonarbitrariness guards against discriminatory digital architectures. Finally, the analysis incorporates comparative perspectives contrasting regulatory frameworks in the European Union, the United States, Brazil, Australia, and Estonia and critiques India’s Digital Personal Data Protection Act, 2023 (DPDP Act) for its deficit of regulatory independence and algorithmic safeguards. Ultimately, the paper proposes comprehensive legal, technical, and institutional reforms to ensure that digital ‘code’ remains firmly subordinated to constitutionalism.