A study by NITI Aayog recommends that the Digi Yatra policy clearly outline rules for deleting passenger information post-travel, amid privacy concerns over user data. The policy states that facial biometrics are deleted 24 hours after the passenger's flight, but deletion rules for other data must be specified. Frequent cybersecurity audits, algorithmic audits, and ongoing monitoring are also advised to ensure data security and system reliability.
