Report flags feature to centrally control access on ECINET

1. At a Glance

• ECINET is the Election Commission of India's (ECI) single digital platform for election information and services. It brings 40+ existing ECI apps and portals into one system [1][2][4].
• A civic-tech audit reports that ECINET has a State-by-State on/off switch for viewing enumeration form details, plus a "disable" button for State Nodal Officers (SNOs). In effect, the Centre (ECI HQ) can cut off State-level access [7].
• UPSC relevance: it touches ECI autonomy and internal checks, the centralisation versus the statutory role of EROs and DEOs, the integrity of the electoral roll, data governance, and digital public infrastructure in elections.

2. Why in the News

• 21 October 2026: The Hindu (p. 5) reported an audit of ECINET by 'Charchagram', a civic tech initiative, authored by data scientist Saurav Rajput [7].
• The audit found that ECINET has a dedicated SNO management area (create, manage, update) with a built-in disable action. The disable pop-up reads: "On disabling this State Nodal Officer, the user will no longer be able to access the application." [7]
• The code also contains the message "View enumeration form details is not enabled for selected State." This means enumeration-form viewing can be switched on or off per State [7].
• The report matters because Election Commissioners Sukhbir Singh Sandhu and Vivek Joshi had objected to the "gradual centralisation" of ECINET and the electoral roll database [7][6].
• ECI's position: EROs and District Electoral Officers continue to exercise their statutory powers under the law [6].

3. Background & Evolution

• Rationale: a single-point app for all stakeholders, replacing a fragmented set of over 40 IT apps, with a better UI/UX [2][4].
• Milestones in order:
• May 2025: ECI announced it would build ECINET [2][4].
• 2025 bye-polls: ECINET operations began [3].
• 2025: a beta version was piloted during the Bihar Assembly Elections and the Special Intensive Revision (SIR) of electoral rolls [1].
• Late 2025 to January 2026: ECI invited citizens' suggestions to make ECINET more user-friendly, with a deadline of 10 January [5].
• 22 January 2026: ECINET formally launched at IICDEM-2026 in New Delhi [1].
• 2026: the Know Your Candidate module was used for the General Elections and bye-elections of 2026 [8].

• October 2026: the ECINET and ERONET roll systems came under scrutiny over the Form 6 row [6], followed by the Charchagram audit [7].

• Predecessors: these are the standalone apps ECINET absorbs, such as ERONET, the system used for processing the electoral roll [6][2].

4. Core Static Facts

5. Multi-Dimensional Analysis

Ethical / Governance

• A switch that lets ECI HQ disable State Nodal Officers concentrates control of roll data at the top. This raises questions of checks within the Commission [7].
• Dissent inside the Commission: two Election Commissioners objected to the centralisation [7][6]. This makes ECI's collegial, multi-member decision-making an issue.
• Transparency: the finding came from a civic-tech audit, not an official disclosure. That points to the need for published architecture and access-control policies [7].

Legal / Constitutional

• ECI's stated defence is that EROs and DEOs keep their statutory powers [6]. The tension is between statutory decentralisation (ERO-led rolls) and technological centralisation (one platform under central control).
• (Static knowledge) Article 324 vests superintendence in ECI, while the RP Act, 1950 assigns roll preparation to EROs. This is the crux of whether central "kill switches" are legally consistent with that design.

Administrative / Federal

• SNOs are the link between the State and HQ. Turning off their access State by State [7] could affect the work of State Chief Electoral Officers during revisions such as the SIR [1].
• Benefits: one interface for 40+ apps cuts duplication and improves coordination across BLOs, EROs and DEOs [1][2].

Scientific / Technological

• Role-based access control and feature flags are standard software practice. The governance question is who holds the switch and whether audit logs exist [7].
• The platform runs in 22 languages plus English, uses BLO call booking and e-EPIC [1], and is a form of digital public infrastructure for elections.

Social / Democratic

• Know Your Candidate strengthens voters' right to information on candidates' criminal antecedents and assets [8].
• Concerns about the integrity of electoral rolls (the Form 6 row [6]) bear directly on inclusion and exclusion of electors.

6. Recent Developments (last 12-18 months)

• May 2025: ECI announced a single-point app to replace 40+ apps [2][4].
• 2025: ECINET operations began in bye-polls [3]. A beta version was piloted in the Bihar Assembly Elections and the SIR [1].
• Up to 10 January 2026: ECI sought citizens' suggestions on ECINET [5].
• 22 January 2026: ECINET launched at IICDEM-2026 [1].
• 2026 elections: the Know Your Candidate module was promoted for the General Elections and bye-elections [8].
• October 2026: the ECINET and ERONET controversy over Form 6. Commissioners Sandhu and Joshi flagged "gradual centralisation", and ECI responded on the statutory powers of EROs and DEOs [6].
• 21 October 2026: the Charchagram audit reported State-wise disable and enable controls [7].

7. Prelims Hooks

• ECINET is the ECI's one-stop digital platform for election-related information and services [1].
• It was launched on 22 January 2026 at IICDEM-2026, New Delhi [1].
• It integrates 40+ ECI apps and portals [1][2].
• Its development was announced in May 2025 [2][4].
• A beta version was piloted in the Bihar Assembly Elections 2025 and the SIR [1].
• It is available in 22 Scheduled languages + English [1].
• Services include Book-a-call with BLO and e-EPIC download [1].
• Know Your Candidate shows criminal cases, assets, liabilities, educational qualifications and authentic social media handles [8].
• Candidate affidavits that can be downloaded are in Form 26 [8].
• ERONET is ECI's electoral roll processing system [6].
• The audit of ECINET's access controls was done by 'Charchagram', a civic tech initiative [7].
• The ECINET module allows HQ to disable a State Nodal Officer [7].
• The Election Commissioners who objected to the centralisation were Sukhbir Singh Sandhu and Vivek Joshi [7][6].

8. The Law Gives the Roll to the ERO, but the Software Decides What the ERO Sees

• The law puts one officer in charge of each constituency's roll
• Section 13B of the RP Act, 1950 makes the ERO (Electoral Registration Officer) responsible for preparing and revising the roll [9].
• Under the Registration of Electors Rules, 1960, the ERO publishes the draft roll, hears claims and objections, and deletes or corrects entries [9].

• As one explainer puts it, the software is not the legal authority that decides who goes on the voter list. The ERO is [6].

• That legal power is empty if the officer cannot see the data

• The two Commissioners reported that EROs could not see the additions and deletions of voters in their own areas [10].

• An ERO who cannot see a deletion cannot check it, so they end up signing off on decisions made somewhere else.

• A per-State switch can block a whole State at once

• A feature flag is an on/off setting in the code that turns a function on or off without rewriting the software. ECINET has one for viewing enumeration forms, set separately for each State [7].

• So a single setting at headquarters can stop every officer in a State from seeing those forms. Disabling a State Nodal Officer has the same effect: that person is locked out of the platform completely [7].

• This is why ECI's defence does not fully answer the worry

• ECI says EROs and DEOs still hold their statutory powers [6]. On paper, that is true.
• The real question is whether they can use those powers when access is controlled from the top. A legal power you cannot act on gives no protection.

9. The Strongest Case for Central Control, and Where It Stops Working

• The case for central control is serious
• On 27 May 2026, the Supreme Court upheld ECI's power to run the SIR under Article 324 and Section 21(3) of the RP Act [12][9].
• The Court accepted ECI's reasons: more than four decades since the last intensive revision, large-scale additions and deletions over the years, migration, and the risk of duplicate entries [12].
• Duplicate voters who have moved between States can only be found on a shared national database. State-by-State systems cannot see across the border.

• Central switches are also normal security practice. If an officer's login is stolen, headquarters must be able to disable it immediately.

• What this argument gets right

• Building ECINET as one platform is not the problem in itself. Merging 40+ separate apps reduces errors that come from mismatched systems [1][2].

• Where the argument stops working

• The Court upheld the SIR partly because of its safeguards: notice, hearing, objections, speaking orders (written orders that give reasons) and appeals [12].
• Every one of these safeguards runs through the ERO at the local level [9].
• If EROs cannot see additions and deletions [10], the safeguards the Court relied on become weaker in practice.

• The Court also said deletion from the roll is not a declaration that a person is not a citizen [12]. Still, a deleted voter cannot vote, so who controls deletions matters directly.

• The disagreement is not settled

• A petition before the Supreme Court alleges that the electoral roll database was centralised, that Form 6 was changed without authority, and that ECINet failed to restore eligible voters [11].
• In October 2026, the Court said it had not ruled on the new Form 6 while hearing the Bihar SIR matter [13]. That question is still open.

10. Why Calling It 'Unanimous' Does Not Settle the Dissent

• The objections were repeated, not a one-off
• Commissioners Sandhu and Joshi reportedly raised formal objections at least 14 times over 10 months. These covered voter registration, deletions and roll software [10].

• ECI's reply was that all these decisions came from unanimous decisions of the full Commission [10].

• Both statements cannot fit together easily

• If objections were recorded, then either they were overruled or they were dropped later. Either way, the public cannot tell which, because the Commission's internal records are not published.

• The dissent became public only through press reports, not through ECI [10][6]. In the same way, the access switches came to light through a civic-tech audit, not through ECI [7].

• Why this matters for a multi-member body

• Parliament made the Commission multi-member so that no single person controls elections. That check works only if disagreements are recorded and can be seen.

• Software settings work in a similar way. If one office holds the switch and does not have to keep a record of its use, the multi-member design does not cover that decision.

• The political fallout shows the cost

• Opposition parties moved a fresh notice seeking the CEC's removal and called for nationwide protests [10].
• A further petition seeks prosecution of the CEC over voter deletions during the SIR [12]. Once public trust in the umpire is questioned, every result becomes easier to dispute.

11. What ECI's Own Review Committee Should Check

• ECI has already set up a review. Its scope decides whether it works
• ECI said a committee led by a senior Deputy Election Commissioner, with an expert from an IIT or IIIT, will review ECINet for compliance with election laws [10].

• It should test the platform against the law, function by function. Can each ERO see every addition and deletion in their constituency? Section 13B makes them responsible for exactly that [9].

• Every 'disable' action should carry written reasons

• The RP Act already requires ECI to record reasons in writing before ordering a special revision under Section 21(3) [9].

• The same standard should apply to software. Before an SNO is disabled or a State's access is turned off [7], the order should be in writing, give reasons and be kept in an audit log (a permanent record of who did what, and when).

• Change forms through the Rules, not through code

• Commissioner Joshi reportedly argued that a statutory form such as Form 6 cannot be changed without amending the Registration of Electors Rules, 1960 [6].

• The fix is simple. If a form must change, the Rules should be amended and notified first, and the software updated afterwards. Otherwise the code ends up changing the law in practice.

• Publish the access-control policy

• Role-based access control means each type of user is allowed to see only certain things. ECI should publish which role can see which data, and who can switch it off.
• Right now, outsiders learnt about the switches only by reading the code [7]. ECI asked citizens for suggestions on ECINET [5], so publishing how access works would follow from that same openness.

12. Anchors for Answers

• Data: ECINET merges 40+ ECI apps and portals into one platform [1][2]; two Election Commissioners reportedly raised formal objections at least 14 times in 10 months [10]
• Report/Committee: ECI's ECINet compliance review committee, 2026, headed by a senior Deputy Election Commissioner with an IIT/IIIT expert [10]; Charchagram civic-tech audit of ECINET, October 2026 [7]
• Law/Case: Article 324; RP Act, 1950, Section 13B (the ERO prepares the roll) and Section 21(3) (special revision, with reasons recorded in writing) [9]; Registration of Electors Rules, 1960 [9]; Supreme Court SIR judgment, 2026 INSC 564, 27 May 2026, which upheld the SIR but relied on notice, hearing and appeal safeguards [12]

13. Mains Relevance

• GS-II:
• Appointment to constitutional posts; powers, functions and responsibilities of constitutional bodies (ECI).
• Salient features of the Representation of People's Act.

• E-governance.

• GS-III: IT and digital infrastructure; data security.

• GS-IV: transparency and accountability in public institutions.
• Question stems: 1. "Technology-driven centralisation of electoral roll management may improve efficiency but strain the statutory architecture of electoral administration." Critically examine with reference to ECINET. 2. Discuss the significance of internal dissent within a multi-member Election Commission for the credibility of electoral governance. 3. How can digital public platforms such as ECINET be designed to balance data integrity, federal coordination and accountability?

14. Related Topics to Study Next

• Special Intensive Revision (SIR) of electoral rolls: ECINET's beta was piloted during it [1].
• ERONET and Form 6 (new voter registration): the current controversy over roll software [6].
• Article 324 and the Chief Election Commissioner and Other Election Commissioners Act, 2023: the structure and independence of a multi-member ECI.
• RP Act, 1950 and 1951: the statutory roles of the ERO, DEO and CEO, and candidate affidavits.
• Form 26 affidavit and voters' right to know: the basis of the Know Your Candidate module [8].
• Digital Personal Data Protection Act, 2023: governance of electors' personal data.
• IICDEM (India International Conference on Democracy and Election Management): the venue of ECINET's launch [1].

15. NCERT Concepts to Revise

• Election Commission of India (Polity): ECINET is ECI's platform; Article 324 powers over rolls and elections frame the centralisation debate.
• Multi-member Election Commission (Polity): Two Election Commissioners dissented against centralisation; majority decision-making in the Commission is central to this story.
• Electoral roll (Polity): The access controls govern enumeration forms and roll data, whose integrity and ERO role are at stake.
• Decentralisation (Polity): Tension between statutory powers of local EROs and DEOs and central control over State-level access.
• District Election Officer (Polity): ECI says DEOs keep statutory powers; knowing their role shows what central switches could affect.
• Digital public infrastructure (Polity): ECINET is a shared digital platform for elections, raising questions of who controls access.

16. Common Errors / Trap Areas

• ECINET and ERONET are different. ERONET is the roll-processing system; ECINET is the umbrella platform covering 40+ apps [6][1].
• Announcement and launch dates differ. Announced in May 2025, piloted in 2025, formally launched on 22 January 2026 [2][1].
• Languages: the count is 22 Scheduled languages + English, not "all 22 languages only" or "12" [1].
• The audit was not by ECI or CAG. It was by Charchagram, a civic tech initiative [7].
• The candidate affidavit is Form 26, not Form 6. Form 6 is for new voter enrolment [8][6].