Digi Yatra Begins International Passenger Trials at Seven Airports

1. At a Glance

• Digi Yatra is a facial-recognition-based digital travel facility of the Ministry of Civil Aviation (MoCA). It is now being trialled for international passengers at 7 airports [1].
• It ties a passenger's e-passport chip data to their face through a Verifiable Credential (VC). The VC is stored in the passenger's Digi Yatra wallet on their own device [1].
• It sits under the Digital India and Ease of Flying frameworks [1]. It is relevant to GS-II (e-governance), GS-III (infrastructure, technology, internal security) and current debates on biometric privacy.
• It supplements existing processes and does not replace them. Immigration, airline document checks and the need to carry travel documents all continue [1].

2. Why in the News

• Digi Yatra has started trials for international passengers at seven airports, running November–December 2026 [1].
• The trial covers select international flights of Air India and IndiGo. It is open to eligible Indian nationals holding e-passports [1].
• Feedback from the trial will shape a wider rollout in 2027 [1].

3. Background & Evolution

• 01.12.2022 — Digi Yatra launched at Delhi, Bangalore (Bengaluru) and Varanasi airports [2].
• 20 March 2025 — In a Lok Sabha reply, MoCA said an audit found Digi Yatra follows industry practices on privacy, security and governance. It also said no proposal to change the system was under consideration [3].
• By 2026 — The platform has over 26.5 million users and has enabled more than 110 million journeys across 39 domestic airports [1].
• Nov–Dec 2026 — International trials at 7 airports [1].
• 2027 (planned) — Wider international rollout, plus 25 more domestic airports to be covered [1].

4. Core Static Facts

Item	Fact
Nature	Facial-recognition-based digital travel facility for seamless, paperless air travel [1]
Ministry	Ministry of Civil Aviation [1]
Vision frameworks	Digital India and Ease of Flying [1]
Launch	01.12.2022 — Delhi, Bengaluru, Varanasi [2]
Domestic reach	39 airports; >110 million journeys; >26.5 million users [1]
Domestic expansion target	25 more domestic airports by 2027 [1]
International trial	7 airports, Nov–Dec 2026, Air India and IndiGo flights, Indian e-passport holders only [1]
Touchpoints	Terminal entry, Security Hold Area (SHA), boarding gates, wherever the infrastructure exists [1]
Credential	e-passport-based Verifiable Credential (VC), created in the Digi Yatra app [1]
Storage	Digi Yatra wallet on the passenger's device [1]
Enrolment steps	1. Scan the MRZ → 2. read the passport chip over NFC on a compatible smartphone → 3. take a selfie → 4. verify details [1]

Key terms

• MRZ (Machine Readable Zone): the printed zone on the passport that is scanned optically [1].
• NFC (Near Field Communication): reads the passport's embedded chip electronically [1].
• VC vs Wallet: the VC is the credential itself. The wallet is where it is stored on the device [1].

5. Multi-Dimensional Analysis

Scientific / Technological

• It combines e-passport chip reading over NFC, MRZ scanning and selfie-based face matching [1].
• Because the chip data is read and matched to a live selfie, the credential rests on cryptographically held passport data, not just an image of the document.
• Phones without NFC cannot enrol, so smartphone capability limits who can take part.

Administrative

• The pilot-then-scale model (a short trial at chosen airports, then the 2027 rollout) lowers the risk of a nationwide failure [1].
• Rollout depends on whether each airport's touchpoints have the required infrastructure [1].
• The facility has to work alongside immigration (MHA's domain) and airline document checks, which it does not replace [1]. That makes coordination across agencies the main bottleneck.

Ethical / Governance (privacy)

• Credentials stay in the wallet on the passenger's own device [1]. This is a decentralised design, not a central government database.
• MoCA told the Lok Sabha that an audit found industry-standard privacy, security and governance practices [3].
• Open concerns remain: whether consent is truly voluntary, purpose limitation, how long data is kept at airport touchpoints, and how the system fits the DPDP Act, 2023 framework and the Puttaswamy (2017) privacy tests (legality, necessity, proportionality).

Economic

• With more than 110 million journeys already handled [1], faster processing raises terminal throughput without new physical capacity. This matters as air traffic grows.
• It supports Ease of Flying [1] and India's ambitions as an aviation hub.

Social

• Eligibility is limited to Indian nationals with e-passports [1]. Holders of older non-chip passports and foreign nationals are excluded for now.
• Digital-literacy and device gaps can create a two-tier experience at airports.

Geopolitical / Strategic

• International use needs interoperability with global e-passport standards. If the trial succeeds, it could make cross-border biometric travel corridors possible.
• Biometric identity at borders also has internal-security uses, which strengthens the need for safeguards.

6. Recent Developments (last 12–18 months)

• 20 Mar 2025: Lok Sabha reply on audit findings and no proposed change to the system [3].
• 2026: Platform crosses 26.5 million users and 110 million journeys at 39 domestic airports [1].
• Nov–Dec 2026: International passenger trials begin at 7 airports with Air India and IndiGo [1].
• 2027 (planned): Wider international rollout and 25 more domestic airports [1].

7. Prelims Hooks

• Digi Yatra is implemented under the Ministry of Civil Aviation, not MeitY or MHA [1].
• Digi Yatra launched on 1 December 2022 at Delhi, Bengaluru and Varanasi [2].
• International trials run at 7 airports during November–December 2026 [1].
• Trial airlines are Air India and IndiGo [1].
• The trial is open only to Indian nationals holding e-passports [1].
• The international credential is an e-passport-based Verifiable Credential (VC) [1].
• The VC is stored in the Digi Yatra wallet on the passenger's device [1].
• Enrolment uses MRZ scan + NFC chip read + selfie + verification [1].
• MRZ is printed and scanned. NFC reads the embedded chip [1].
• Touchpoints are terminal entry, Security Hold Area (SHA) and boarding gate [1].
• Domestic coverage is 39 airports with more than 110 million journeys [1].
• The platform has over 26.5 million users [1].
• 25 more domestic airports are planned by 2027 [1].
• Digi Yatra complements immigration and document checks and does not replace them [1].
• Policy umbrella: Digital India and Ease of Flying [1].

8. Who Answers When Something Goes Wrong?

• Digi Yatra is run by a private not-for-profit company, not by the ministry itself
• The Digi Yatra Central Ecosystem is managed by the Digi Yatra Foundation (DYF). DYF is a not-for-profit company registered under Section 8 of the Companies Act, 2013 (the section for companies that may not distribute profits) [6].

• The government has said that because of this, DYF does not come under the Right to Information (RTI) Act [6].

• So the main public tool for checking it is switched off

• MoCA told the Lok Sabha that an audit found Digi Yatra follows industry practices [3].
• A citizen cannot file an RTI to read that audit, to ask how many data requests DYF has received, or to ask who those requests came from.

• The public has to accept the ministry's summary on trust. That is weak accountability for a system that handles face data at 39 airports [1].

• The international trials raise the stakes

• The new credential is built from e-passport chip data [1]. That is a government identity document, not just a boarding pass.
• A public identity system run by a body outside RTI is a governance gap. It is not only a technical question.

9. Is the Face Data Really Only on Your Phone?

• What the government says now
• Passenger data is encrypted and kept in the wallet on the passenger's own smartphone, not in a central database [4].

• At the airport, the data is deleted from the airport's system within 24 hours of the flight leaving [4].

• An earlier official design said something different

• An earlier Digi Yatra Biometric Boarding System policy document (version 5.2) described the passenger's face template being added to a Digi Yatra database "for future validation" [5].

• So the system's design has changed over time. The "no central storage" promise is a design choice that can be changed again. Nothing in the technology itself fixes it.

• Why this matters for a first-year reader

• "Decentralised" means the data is spread across users' own devices instead of sitting in one big government store.
• A decentralised design is only as strong as the rule that stops it from becoming centralised later. At present that rule is in policy documents and press releases, not in a law written for Digi Yatra.

10. The Strongest Case for Digi Yatra, and Where It Falls Short

• The case in favour is serious, and much of it holds up
• It is voluntary. It adds to existing processes and replaces none of them. Immigration and document checks continue [1].
• Data sits on the user's device, and airport copies are deleted within 24 hours [4]. That is far safer than one central face database, which would be a single target for hackers.
• The 2021 policy requires the app to tell users and take their consent before sharing face data with airport checkpoints. It also lets users opt out and delete their profile at any time [7].

• People clearly want it: more than 110 million journeys so far [1].

• Where it still falls short

• The good design rests on promises that cannot be checked independently. The audit cannot be obtained under RTI [6], and the design has already changed once [5].

• "Voluntary" only means something if the manual queue stays a real choice. If non-Digi Yatra lanes become slow or understaffed, people will sign up under pressure, not out of free choice.

• An honest verdict

• On architecture (how the system is built), Digi Yatra is better than most biometric systems.
• On accountability, it is weaker than it should be. The fix is more openness, not scrapping the system.

11. The 2027 Rollout Will Meet the New Data Law

• The timing lines up
• The government notified the Digital Personal Data Protection (DPDP) Rules, 2025 in November 2025 [8].

• Organisations get an 18-month phased period to comply [8]. That ends around the same time as Digi Yatra's planned 2027 international rollout [1].

• What the law asks for on consent

• The consent notice must stand on its own (not hidden inside other terms) and must state the specific purpose for collecting the data [8].

• People can withdraw consent at any time [9].

• What this means for Digi Yatra

• Every new use of the face data, such as using a domestic credential for international travel, would need its own clear purpose stated in the notice.
• Withdrawing consent must actually delete data everywhere it is held. That includes any airport or backend copies, not just the copy on the phone.

12. What Should Happen Before the Wider Rollout

• MoCA should open DYF's working to public scrutiny
• DYF is outside RTI today [6].

• MoCA can require DYF to publish its yearly security audit summary, and a count of data requests received from any agency. It does not need to change the RTI Act to do this.

• DYF should publish the current technical design in one official document

• Older policy versions describe central storage of face templates [5]. The present position appears only in press statements [4].

• One updated public policy would replace these mixed signals. It should state clearly what is stored, where, and for how long.

• MoCA and DYF should finish DPDP compliance before 2027, not after

• Use the 18-month window under the DPDP Rules [8] to put standalone consent notices and working withdrawal in place [9] before international scale-up.

• Airport operators should keep a properly staffed manual lane

• This keeps the opt-out promised in the policy [7] real in practice, and keeps consent free in the sense the Puttaswamy (2017) necessity and proportionality tests require.

13. Anchors for Answers

• Data: More than 110 million journeys and more than 26.5 million users across 39 domestic airports [1]
• Data: Airport copies of passenger data are deleted within 24 hours of the flight leaving [4]
• Report/Committee: Digi Yatra Biometric Boarding System policy, version 7.8 (March 2021). It requires consent and allows opt-out and profile deletion [7]
• Law/Case: Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025 (notified November 2025, 18-month compliance period) [8]; K.S. Puttaswamy v. Union of India (2017), proportionality test
• Law/Case: Digi Yatra Foundation is a Section 8 company under the Companies Act, 2013, which the government says puts it outside the RTI Act [6]
• Scheme: Digital India and Ease of Flying, the policy frameworks Digi Yatra sits under [1]

14. Mains Relevance

• GS-II: Government policies and interventions; e-governance applications; transparency and accountability.
• GS-III: Infrastructure (airports); science and technology in everyday life; challenges to internal security through communication networks and data.
• GS-IV: Ethics of surveillance technology; informed consent.

Possible question stems

1. "Digi Yatra's extension to international travel marks a shift from document-based to identity-based border facilitation. Examine its benefits and the privacy safeguards it requires." (GS-II/III, 250 words)
2. "Discuss how decentralised digital credentials can reconcile efficiency with the right to privacy in public service delivery, with reference to Digi Yatra." (GS-II)
3. "Facial recognition technology in public infrastructure: an enabler of Ease of Living or a tool of surveillance? Critically analyse." (GS-III/IV)

15. Related Topics to Study Next

• e-Passport (chip-enabled passport, MEA): the source document for the international VC.
• DPDP Act, 2023: the legal framework for processing biometric personal data.
• K.S. Puttaswamy v. Union of India (2017): privacy as a fundamental right and the proportionality test.
• UDAN / Regional Connectivity Scheme: the airport expansion that drives domestic Digi Yatra growth.
• Fast Track Immigration – Trusted Traveller Programme (MHA): a parallel biometric immigration facility; don't confuse the two.
• Digital Public Infrastructure (Aadhaar, DigiLocker): comparable identity and credential architecture.
• Facial recognition in policing (e.g., AFRS by NCRB): the contrasting surveillance-use debate.

16. NCERT Concepts to Revise

• Right to privacy (Polity): Biometric face data raises Puttaswamy (2017) privacy questions; the note tests Digi Yatra against it.
• Digital Personal Data Protection Act 2023 (Polity): The law governing consent and processing of biometric personal data, which Digi Yatra's wider rollout must comply with.
• Doctrine of proportionality (Polity): Puttaswamy's legality, necessity and proportionality test is how the note judges whether face-data use is justified.
• Section 8 company (Polity): Digi Yatra Foundation is a Section 8 non-profit company, which is why the government says it falls outside RTI.
• Right to Information Act 2005 (Polity): Being outside RTI means citizens cannot demand audit reports or data-request details, creating the accountability gap.
• Digital public infrastructure (Polity): Digi Yatra's credential and wallet design is comparable to Aadhaar and DigiLocker, shared digital platforms.

17. Common Errors / Trap Areas

• Wrong ministry: Digi Yatra is under MoCA, not MeitY or MHA [1]. Immigration remains a separate process [1].
• "Replaces documents/immigration": false. It only complements them [1].
• MRZ vs NFC: MRZ is the printed, scanned zone. NFC reads the chip [1].
• VC vs wallet: the VC is the credential. The wallet is the on-device storage [1].
• Number confusion: 7 is the international trial airports; 39 is the domestic airports; 25 is the additional domestic target for 2027 [1]. The 2022 launch was at 3 airports [2].
• Eligibility: trials are for Indian e-passport holders, not all international travellers [1].