IRCTC Floats Tender to Appoint Consultant to Monetise Digital Data, Digital Liberties Group Flags Risks

The IRCTC tender states that it is “a reservoir of huge amount of digital data which opens several opportunities for IRCTC for monetization”.

By David Delima | Updated: 19 August 2022 17:11 IST

IRCTC Floats Tender to Appoint Consultant to Monetise Digital Data, Digital Liberties Group Flags Risks

The IRCTC tender discusses identification of market potential internationally for specific data sets

Highlights

The IRCTC is looking to utilise its vast data resources to generate reven
The public sector undertaking is looking to raise around Rs. 1,000 crore
India does not currently have a personal data protection law

The Indian Railway Catering and Tourism Corporation (IRCTC) has floated a tender seeking to monetise digital data of the Indian Railways and the IRCTC. The latter is looking to appoint a consultant for ‘digital data monetisation'. The tender, which seeks to utilise the data from passenger, freight, and parcel trains, was spotted by digital liberties organisation Internet Freedom Foundation (IFF) on Friday. It is worth noting that India currently does not have a data protection law to regulate the use of citizens' personal information.

According to the e-tender document (archived version) uploaded on the IRCTC website, titled ‘Consultancy for Digital Data Monetization', the public sector undertaking is looking to appoint a consulting firm for the project, in order to generate up to Rs. 1,000 crore in revenue. The deadline for tender offers is August 29, and the IRCTC has set the earnest money deposit (EMD) at Rs. 2 lakh, according to the document.

The IRCTC states that it is “a reservoir of huge amount of digital data which opens several opportunities for IRCTC for monetization” and that it wishes to “leverage its data assets and market position to drive strong growth in revenues”. The consulting firm will be expected to study IRCTC data including data from the railway's passenger, freight, parcel, catering, tourism, and other operations.

[Sponsored] Samsung Galaxy S24: The Ultimate Camera Phone With Smarter On-Device AI

The data that IRCTC has listed out in the tender (page 11) includes customer data captured from the Indian Railways, which includes “basic data” such as their name, age, mobile number, gender, address, email addresses, as well as their class of journey, payment mode, and login information — including their username and password.

According to the IRCTC's tender, the consultant will be expected to aggregate the data captured, segregate the data, and “identify market potential internationally” for specific data sets. They must also establish procedures and protocols for long-term monetisation of the digital data of the Indian Railways, and “handhold” the monetisation process.

In order to propose business models for monetisation of data, the tender states that the consulting firm should study legislation related to information technology, including the IT Act, 2000 and its amendments, as well as data privacy laws such as the General Data Protection Regulation (GDPR) and the “current Personal Data Protection Bill 2018 of India”. However, as the IFF points out, Personal Data Protection Bill was withdrawn by the government on August 3.

How to Book Train Tickets via IRCTC Using Your Smartphone

The digital liberties organisation has highlighted the risks of monetising customer data, stating that a profit maximisation goal could result in increased data collection, which would be in violation of the principles of data minimisation and purpose limitation. Meanwhile, the monetisation would take place in the absence of a personal data protection law. “Past experiences from the misuse of [the] Vahan database amplify fears of mass surveillance & security risks,” the IFF stated in a tweet.

Gadgets 360 has reached out to the Indian Railways for comment and will update this article when a response is received.

On August 3, the government withdrew the Personal Data Protection Bill, 2021, announcing that it was working on a new comprehensive law. The bill had proposed regulation of transmission of data across borders, while empowering the government to seek data from companies. At the time, Union Minister of Electronics & Information Technology Ashwini Vaishnaw said that the government was hopeful of getting new legislation passed by the Budget session of parliament.

How is Alexa faring in India? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: IRCTC, Data Monetisation, Indian Railways, Privacy, Personal Data Protection Bill

David Delima

Email David Delima

As a writer on technology with Gadgets 360, David Delima is interested in open-source technology, cybersecurity, consumer privacy, and loves to read and write about how the Internet works. David can be contacted via email at DavidD@ndtv.com, on Twitter at @DxDavey, and Mastodon at mstdn.social/@delima. More