DPI Brief — September 26, 2026

The Finance Minister draws the MDR line, and the ecosystem starts spending against it (L2 — Payments). With nineteen days to the October 15 switch, Finance Minister Nirmala Sitharaman insisted the 0.4% UPI merchant fee above ₹2,000 is “not a tax, cess or surcharge” and will not burden consumers — the charge is shared among payment ecosystem participants to fund infrastructure and innovation. She reiterated that merchants collecting up to ₹1 lakh a month via UPI QR codes are fully exempt, a carve-out that shields about 96% of all merchant transactions. The exemptions map is now fully drawn: P2P transfers stay free, essential services (railways, telecom, fuel, insurance) attract a flat ₹5 above ₹2,000, and capital-markets payments get a concessional 0.02% capped at ₹300. Meanwhile the commercial response is accelerating: PhonePe will hire over 20,000 frontline staff and deploy 50 lakh payment devices in twelve months, half in rural India, citing a fund that earmarks 5% of MDR collections for small-merchant expansion, and Pine Labs plans 10 lakh devices of its own. The uncomfortable part: at the SBI Banking & Economics Conclave, NPCI chief Dilip Asbe leaned on AI-enabled cyber threats to justify the fee, but did not say how much of the projected ₹13,000–15,000 crore annual collection will actually go to security, or who audits that spend.

Biometrics replace the UPI PIN, one wallet at a time (L2 — Payments). Samsung has rolled out on-device biometric authentication for UPI payments in Samsung Wallet — fingerprint or face unlock in place of PIN entry, capped at ₹10,000 per transaction, following the RBI-NPCI push for stronger, friction-light authentication. Expect other Android OEMs and UPI apps to follow as the two-factor mandate reshapes the payment UX; the open question is liability allocation when biometrics fail on shared or borrowed phones.

Aadhaar email updates go free — and 2.5 lakh people moved fast (L1 — Identity). UIDAI has enabled free email address updates through the Aadhaar app, with over 2.5 lakh residents availing the service within two days. The waiver runs until December 31, 2026, and the app-based flow — no enrolment-centre visit — is part of UIDAI’s broader shift of update services onto the new Aadhaar app as mAadhaar heads for retirement. A current email on file matters more than it sounds: it carries OTPs for eKYC, DigiLocker pulls, and authentication alerts. Also in the identity window: mandatory biometric updates for children at ages 5 and 15 remain free only until September 30 — after that, a ₹125 fee applies outside the first-free-update rule.

Aarogya Manthan puts ABDM’s numbers on the table — and a claims-adjudication framework (L5 — Sectoral). Inaugurating Aarogya Manthan 2026 marking eight years of PM-JAY, the Union Health Minister reported the ABDM ecosystem at more than 97.8 crore ABHAs, 121 crore linked health records, 5.6 lakh registered facilities and 11 lakh professionals — and unveiled a Framework for Auto-Adjudication of Claims under AB PM-JAY, a technology-led push to cut claim settlement times. Speakers pressed for ABHA to become the default health-insurance identity, with standard treatment codes and billing formats riding the National Health Claims Exchange. India also showcased this stack at UNGA81 — 900 million health IDs and nearly 497 million eSanjeevani teleconsultations — while Chandigarh was named the best-performing UT for health-record linkage. Auto-adjudication is the item to watch: algorithmic claim decisions at national scale will need audit trails and appeal routes, not just speed.

West Bengal makes GeM procurement mandatory (L4 — Commerce). The state’s finance department has made the Government e-Marketplace compulsory for procurement of goods and services available on the platform, with a three-month deadline for departments to onboard. GeM, which completed ten years this August with ₹20 lakh crore in cumulative purchases — MSEs have won over ₹9 lakh crore of it, 45.6% of the total — now gains one of India’s largest state buyer bases. The consumer angle: mandated marketplace buying only delivers value if listing prices are genuinely competitive, so watch whether West Bengal publishes price-comparison savings the way GeM’s own studies claim.

The DPDP compliance market opens for business (L7 — Trust). Protean eGov Technologies launched an Enterprise DPDP Governance & Consent Platform — consent management, breach-reporting workflows and data-principal rights tooling for large enterprises. The commercial timing is deliberate: Consent Manager rules come into force November 13, 2026, and the Act’s penalty-backed obligations — consent, breach notification within 72 hours, data-principal rights — go fully operational May 13, 2027. A domestic consent-infrastructure market forming around a statutory deadline is exactly how the trust layer converts from paper to plumbing; the test will be interoperability and whether consent artefacts remain citizen-portable rather than vendor-locked.

Week ahead: child-biometric free-update window ends — September 30; LPG Aadhaar biometric gate and trader “No UPI Day” — October 1–2; UPI MDR switch — October 15; DPDP Consent Manager rules — November 13.