The Kerala Real Estate Regulatory Authority on January 17, 2026, notified regarding the disclosure of Aadhaar and PAN Details on the K-RERA Portal.
The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology, has identified a Sensitive Information Disclosure vulnerability on the K-RERA portal, where full Aadhaar and PAN numbers were visible in certain uploaded documents. Such disclosure of Personally Identifiable Information (PII) violates data security norms and is not compliant with CERT-In guidelines and the Digital Personal Data Protection Act, 2023.
As an immediate corrective measure, the Authority has masked the non-compliant documents. All Promoters, Real Estate Agents, and Allottees have been directed not to upload documents containing full Aadhaar or PAN numbers on the K-RERA portal. Only masked formats are permitted—Aadhaar as XXXX-XXXX-1234 and PAN as ABCDE1XXXX.
The directive has come into effect immediately to ensure data privacy, cybersecurity compliance, and protection of personal information.
[Notification no. - KRERA/205/2025-IT]
