CUET Candidate Databases Sold Openly Online; Privacy Breach Raises Data Protection Concerns

Multiple websites are openly selling comprehensive databases containing personal information of candidates who appeared in the 2024-2026 CUET (Common University Entrance Test) examinations. The leaked data includes names, contact details, and examination-related information affecting tens of thousands of students. This incident represents a critical privacy breach within India's national examination infrastructure and highlights serious deficiencies in data protection protocols at institutional and regulatory levels.

Context: CUET, conducted by NTA since 2022, determines admissions to central universities across India. The test attracts over 15+ lakh applicants annually, generating massive databases of sensitive student information. India's data protection framework—governed by Digital Personal Data Protection Act (2023) and ongoing discussions around data localization—remains evolving. Previous breaches (Aadhaar, bank records, government databases) demonstrate systemic vulnerabilities in institutional data handling across India.

Key Facts: CUET candidate databases publicly available for purchase; includes personal/sensitive data; affects multiple exam cycles (2024-2026); websites openly trading in data; no apparent institutional response initially.

Why It Matters for India: (1) Privacy Rights—Violates fundamental right to privacy (Puttaswamy judgment, 2017); exposes students to unauthorized data use. (2) Data Security—Demonstrates institutional incapacity to protect sensitive information; raises questions about government IT infrastructure. (3) Regulatory Gaps—Highlights inadequacies in India's data protection regime and examination authority accountability. (4) Cybercrime Risk—Exposed data can be used for phishing, identity theft, financial fraud targeting vulnerable student populations. (5) Constitutional Angle—Violation of Article 21 (right to life and liberty, privacy dimension) and principles of procedural fairness.

Exam Angle: UPSC Mains (GS-II Privacy, governance; GS-III Cybersecurity, data protection); Prelims (Current affairs, privacy laws); likely questions on India's data protection framework, privacy rights, institutional accountability. Previous connections: Digital Personal Data Protection Act (2023), Puttaswamy judgment, Aadhaar privacy, government cybersecurity frameworks.