DPI Brief — September 20, 2026

The last 24 hours saw action across five of India’s seven DPI layers, with the payments layer dominating: the government mounted a full-throated defence of the new UPI merchant charges, TRAI finalised its anti-spam rulebook, Aadhaar authentication became mandatory for LPG subsidies, Karnataka committed to a statewide ABDM health-records rollout, and DARPG showcased digital governance learnings from Jammu & Kashmir.

L2 Payments: Finance Ministry defends UPI MDR, denies US pressure

The Ministry of Finance rejected allegations that American pressure influenced the decision to introduce a 0.4% merchant discount rate (MDR) on select UPI transactions, stating that the new NPCI guidelines give international credit cards no advantage over RuPay. Under the framework effective October 15, P2M UPI payments above ₹2,000 attract 0.4% MDR (capped at ₹300 for transactions above ₹75,000); railways, telecom, fuel and insurance see a flat ₹5 charge; capital-market transactions get a concessional 0.02%; and small merchants collecting up to ₹1 lakh monthly via UPI QR are exempt. SCC Online’s explainer confirms users themselves pay nothing.

Crucially, the legal architecture is now layered: as The Times of India notes, the September 14 gazette notification S.O. 5067(E) from the Department of Financial Services makes zero-MDR a statutory right for RuPay debit cards (no limit) and UPI transactions up to ₹2,000 — while everything above sits in a price list that is regulation, not law. The political backlash is building too: the BJD has protested the changes, arguing the Centre should fund digital payments directly. The stakes are visible in the scale: UPI processed 24.51 billion transactions worth ₹29.82 lakh crore in August 2026 — a monthly record, up 22% year-on-year across 750+ banks and 554.9 million registered users.

L1 Identity: Aadhaar goes biometric-mandatory for LPG, eyes global expansion

From October 1, Aadhaar biometric authentication will be required to receive the subsidy on domestic LPG refills, ending the OTP-based era for cooking-gas welfare delivery. The move tightens subsidy targeting but raises the usual questions about authentication failures at the last mile — rural consumers without working fingerprints or connectivity will need reliable fallbacks.

Meanwhile, UIDAI is working on taking Aadhaar global, especially for NRIs and OCI cardholders. UIDAI CEO Saurabh Vijay, speaking at Global Fintech Fest 2026, said daily authentications have jumped from about 7 crore to 10 crore, and the authority is preparing infrastructure to handle 25-30 crore authentications a day — a 3x capacity headroom bet on identity becoming India’s most exported DPI.

L5 Sectoral: Karnataka commits to statewide ABDM health records

Karnataka will roll out a statewide digital health records program from early next year, integrating the ABDM-aligned Hospital Management System with the Community Health System. Patients’ ABHA numbers will serve as their digital health identity, letting records travel across facilities with consent-based access controls. Trials are underway at district hospitals and community health centres in Vijayapura, Davangere and Mysuru, with a six-week evaluation window before expansion. If it holds, this is the template for how a large state unifies hospital and primary-care records on a single consent framework.

L7 Trust: TRAI finalises AI-powered anti-spam regulations

TRAI finalised the Telecom Commercial Communications Customer Preference (Third Amendment) Regulations, 2026 on September 18, its most significant rewrite of the spam rulebook since 2018. Key provisions: call-management apps like Truecaller are barred from blanket-blocking 140- and 1600-series numbers; receiving telecom operators must use AI/ML to flag suspected spam and share the data with the sending operator within two hours under new Regulation 21A; and legacy consumer consent is now recognised. The rules take effect in 30- and 60-day phases after notification, and Truecaller has already criticised the data-sharing mandate as anti-competitive — jurisdictional enforcement against app makers remains the open question.

L6 Governance: DARPG workshop puts J&K’s digital delivery on the map

At a DARPG workshop in New Delhi, Jammu & Kashmir showcased its digital governance journey and shared a roadmap for scaling technology-enabled service delivery — a signal that the post-2019 administrative overhaul of J&K’s e-governance stack (integrated service portals, digital service delivery at the last mile) is being packaged as a replicable model for other states.

The throughline

This week’s closing pattern is one of institutional hardening: UPI’s free-for-consumers promise is now anchored in a gazette notification even as merchant fees arrive; Aadhaar’s subsidy role shifts from OTP to biometric; ABDM moves from pilot to statewide commitment; and TRAI converts its anti-spam consultation into enforceable regulation. The DPI stack is maturing from buildout to enforcement — where the next contest will be over who bears the costs.