GSTN Data Breach?

1070
GSTN Data Breach?

Above: Union Finance Minister Arun Jaitley chairing the 27th GST Council meeting, via video conference, in New Delhi/Photo: PIB

The GST Council has proposed that this vital network, GSTN be given back to the government as there are concerns over private entities leaking sensitive information

~By Sumit Dutt Majumder

The GST Council in its 27th meeting on May 4 took two momentous decisions. The first was with respect to the ownership and equity structure of GST Net (GSTN), the IT infrastructure for administering GST. The second was with regard to filing of returns.

GSTN provides IT infrastructure and services to both central and state governments, taxpayers and other stakeholders. It was set up in 2012 based on the recommendations of an expert group as a non-government and not-for-profit private limited company. Private entities held 51 percent equity share and central and state governments collectively had 49 percent equity.

When GSTN came up for discussion in 2011-12, there were two views on it. Those who supported private ownership of GSTN had the following to say about it:

  • As the introduction of GST had already been delayed and GSTN would have to be put in place at the earliest, it should be given financial autonomy in terms of purchasing and acquiring computer hardware and software.
  • As a private entity, GSTN would have autonomy and flexibility in all HR-related matters. It could attract the best talent with higher emoluments and it could follow the “hire and fire” policy in ensuring that the system is an efficient one.

However, those who opposed privatization of GSTN expressed the following concerns:

  • Ownership and custody of data: Related to this was the issue of secrecy and security of data. It was pointed out that the custody of sensitive data and its security should be the sovereign function of the government. The GSTN authority would not actually handle the end-to-end operations of the GSTN Common Portal but would outsource them to a third party entity. This meant that the government would not be the owner or custodian of its own data, and the custody would effectively go to a third party entity. Thus, the government wouldn’t have any control over data secrecy and data security. Experts from trade and industry felt that in this era of stiff business competition, they would feel safer with the data being under government custody.
  • Second, it was argued that there could not be any effective strategic control by the government over the private entity, simply because it would be a minority equity holder.
  • There were also concerns regarding incentives for private entities to invest in a “not-for-profit” company. Would custody of the sensitive trade data be the requisite incentive?
  • Another concern was how would GSTN operate outside the purview of the General Financial Rules, 2005, or remain outside the realm of a CAG audit, particularly as the initial funding of Rs 315 crore for GSTN would be coming from the government. Strangely, though the government would be financing the majority, it would still be the minority stakeholder.

On examining the pros and cons of a private GSTN, the Central Board of Excise and Customs (CBEC) had, in October 2011, recommended a government-owned GSTN with majority equity share for central and state governments. However, by April 2012, a final decision was taken in favour of a private GSTN.

Accordingly, GSTN was registered as a not-for-profit private limited company with the following equity structure: central government (24.5 percent), state governments (24.5 percent), other non-government organisations like HDFC, ICICI Bank, etc (51 percent).

Meanwhile, when the 122nd Constitution Amendment Bill, 2014, was referred by the Rajya Sabha to the Select Committee in July 2015, the Committee recommended, based on a representation from the United Bank of India: “…GSTN’s work is of strategic importance to the country and the firm would be a repository of a lot of sensitive data on business entities across the country. In light of above, the Commit-tee strongly recommends that government may take immediate steps to ensure non-government financial institution shareholding be limited to public sector banks or public sector financial institutions.”

Finally, based on the concerns raised about the security of the taxpayers’ data on the portal, the GST Council recently took a decision to convert GSTN into a totally government-owned company with an equity share of 50 percent each between the central government and all the states collectively. The distribution of equity shares among the states will be formulated based on the GST revenue collections by each state.

It was stated at the meeting that a majority of the GST processes were IT-driven and GSTN was handling invoice data of millions of entities. Also, considering the nature of “state functions” performed by GSTN, the Council felt that it be converted into a fully-owned government firm. The GSTN board will be allowed to continue with the current staff at the existing terms and conditions for a period of up to five years. There will also be provisions for a flexible HR policy in respect to drawing talent from the market with higher emoluments and also for continuing with the “hire and fire” policy, keeping an eye on the efficacy of GSTN.

The second momentous decision was with regard to the filing of returns. GSTN failed at the introduction of GST in July 2017 itself. This prompted the Council to take certain interim measures on filing of returns. The erstwhile planned GSTR-2 and GSTR-3 returns formats were deferred, and instead taxpayers were called upon to file GSTR-1 and GSTR-3B returns. GSTR-1 contained the supplier’s outward supply details and GSTR-3B was a simplified, summarised monthly return on self-declaration basis.

While this was the interim arrangement, a group of state finance ministers was set up under the chairmanship of Sushil Kumar Modi, deputy chief minister of Bihar, to recommend a simplified returns filing process. Based on the recommendations of this group, the GST Council has now decided on the following:

  • There will be a three-stage transition period for going over to the new return format. In the first stage (some six months from now), till the time the transition to the new returns filing process starts, the present system of GSTR-3B and GSTR-1 will continue.
  • In the second stage, GSTR-1, i.e., the returns to be filed by the supplier, will be withdrawn. But GSTR 3-B, i.e. the summary input-output returns will continue. At this stage, the new returns system will become partially operational inasmuch as the supplier will be allowed to upload invoices continuously anytime during the month and the recipient will also be able to view it simultaneously. The recipient can take input tax credit immediately after the supplier uploads the invoices. Meanwhile, taxmen will watch whether the supplier has paid GST in respect of the uploaded invoice. During this stage, the recipient will be continuously informed about the gap between the credit available to him as per invoices uploaded by his supplier (sellers) and the credit being claimed by him. There won’t be any automatic reversal of credit. In cases of default, the taxmen will pursue it with the supplier, and if they fail to get him to pay the tax for any reason, including not being able to locate him, then the recipient will be asked to reverse the credit.
  • In the third and final stage, GSTR-3B and the facility of credit to the recipient (buyer) will be withdrawn and only the new returns format will be operational. The supplier will have to fill invoice-wise details of the outward supplies made by him, based on which the system will automatically calculate the supplier’s tax liability and the entitled tax credit that the recipient would automatically avail of.
  • Those having no transaction (NIL returns) and those under the Composition Scheme would file quarterly returns instead of monthly ones.
  • Returns filing dates will be staggered based on the turnover of the registered person. This will help GSTN to manage the load on the IT system as well.
  • As a measure of “supplier side control”, uploading of invoices by the supplier (seller) to pass credit to the recipient will be blocked in cases where the former has defaulted in payment of tax above a certain threshold. This will help in controlling misuse of credit facility.

It is evident from the above that an attempt has been made to facilitate genuine trade by automatically availing of credit immediately after uploading of invoices by the suppliers. There seems to be no more need for a separate system based on matching of input tax credit. The responsibility will remain on the recipient to ensure that he chooses his supplier after checking his credentials. This is because if there is a case of non-payment of tax or non-uploading of invoice, the onus will ultimately fall on him to reverse his credit.

The Council has also deferred decisions in two cases—incentivising digital transactions and cess on sugar.

On the first issue, the proposal was to incentivise digital payments by offering consumers two prices for the goods they purchase. One price was based on the normal GST rate for purchases made through cash payment and the other was a 2 percent concession subject to a ceiling of Rs 100 per transaction if  the consumer paid through cheque or any digital mode. Reportedly, a majority of the states supported the proposal, but others did not agree and raised certain concerns.

The fact that the same item would be cheaper for those who made a digital payment and costlier for those who could not do so may make it a politically sensitive issue.

The Council referred the matter to a Group of Ministers (GoM) headed by Sushil Kumar Modi.

The second proposal of three percent cess on sugar from the Union finance minister was out of concern for sugarcane farmers. The cost of production of sugar had risen beyond Rs 35 per kg, while the market price ranged between Rs 26 to Rs 28 per kg.

Consequently, sugar mill owners are unable to pay sugarcane farmers, pushing them into deep distress. Hence the proposal to distribute the cess to sugarcane-producing states.

Coincidentally, most of the sugarcane- producing states such as UP, Maharashtra and Bihar, who supported the move, are ruled by the BJP. The states ruled by opposition parties such as West Bengal, Kerala and Andhra Pradesh opposed the move. They argued that the country was witnessing agrarian distress over different farm items like cotton, rubber, food grains, fruits and vegetables and a selective cess only on sugar was not the right way to redress the problem.

Besides, the idea of a cess itself is against the grain of GST. Taxpayers do not get any credit of the cess paid by them and the credit-chain of GST gets broken.

The cess becomes a cost to taxpayers and thus adds to inflation. These apart, cess only goes to the central kitty and therefore states are generally against cess. In the absence of consensus, this matter too was referred to a GoM headed by Himanta Biswa Sarma, Assam’s finance minister.

Overall, it was a productive GST Council meeting.

The author is the former chairman, Central Board of Excise & Customs, from 2010-11