How can digital public platforms such as ECINET be designed to balance data integrity, federal coordination and accountability?

ECINET was launched in January 2026 and merges 40+ Election Commission apps and portals into one platform [1]. However, a civic-tech audit has reported State-wise switches that let ECI headquarters disable State Nodal Officers [4]. Good design must bring the efficiency of one platform without weakening the decentralised roll system set up by law.

Data integrity: one dataset, many verifiers

• Single source of truth: one platform in place of many fragmented apps reduces mismatched records [2].
• ERO visibility by default: Section 13B of the RP Act, 1950 makes the ERO responsible for the roll [3]. So every addition and deletion in a constituency must be visible to that ERO.
• Law before code: a statutory form should change only after the Registration of Electors Rules, 1960 are amended [5]. The software should be updated after that.
• Tamper-evident audit logs: these record who changed what, and when.

Federal coordination: national scale, local authority

• A shared national database can find voters enrolled in two States. Separate State systems cannot.
• Role-based access should follow the CEO–DEO–ERO–BLO hierarchy, not depend on one central master switch.
• Reasoned switches: HQ may disable a stolen login at once, but turning off a whole State should need a written order with reasons. Section 21(3) already requires this for special revisions [3].
• Localisation: 22 Scheduled languages plus English, and Book-a-call with BLO [1], keep the platform usable at the grassroots.

Accountability: who holds the switch

• Publish the access-control policy: the switches came to light only through a code audit [4].
• Collegial control: State-level shutdowns should need sign-off by the full Commission. Two Commissioners have objected to "gradual centralisation" [4].
• Periodic independent audits with public reports.
• Citizen feedback loops, building on ECI's call for public suggestions on ECINET [6].

Citizen → BLO → ERO (decides; sees every change)
                 ↓ logged
         State CEO ⇄ ECI HQ (deduplication, security)
   Any "disable" → written reasons + audit log

Fig: The legal chain of authority kept inside one platform

In short, ECINET's value lies in connecting the officers the law makes responsible, not in concentrating control at the top. If access is visible, reasoned and logged by default, and the platform follows Article 324's mandate of free and fair elections and the DPDP Act, 2023, it can become trusted digital public infrastructure. That would advance SDG 16's goal of accountable institutions.