GST System Enhances Security and Transparency for Taxpayer Data Access (July 2025 Update)

Effective July 17th, 2025, the GST System has introduced enhanced security and transparency measures to give taxpayers greater control over their data accessed by ASPs and GSPs.

Taxpayers will now receive real-time email/SMS notifications whenever ASPs obtain OTP-based consent to access GST data, detailing the ASP/GSP names, consent timestamps, and validity periods, enabling immediate detection of unauthorized access. Additionally, the GST Common Portal has been upgraded to let taxpayers view all current and past ASP/GSP access instances and revoke any active consent directly from their dashboard, empowering them to manage data permissions seamlessly.

These steps aim to strengthen data security, transparency, and trust within the GST System, encouraging taxpayers to actively monitor and manage their data access permissions.

Taxpayer Advisory: Enhanced Security and Transparency in GST System Access (Effective July 17th, 2025)

In a continuous effort to fortify data security and enhance transparency for taxpayers, the Goods and Services Tax (GST) System has rolled out significant security enhancements concerning Application Suvidha Providers (ASPs) and GST Suvidha Providers (GSPs). These improvements, effective July 17th, 2025, aim to provide taxpayers with greater control and insight into how their data is accessed.

The GST System emphasizes a robust and secure digital environment. As taxpayers increasingly interact with the system through ASPs, who in turn leverage GST System-authorized API channel partners (GSPs), ensuring the integrity and transparency of these interactions is paramount. The newly introduced features address this by providing clear communication and actionable control to the taxpayer.

Key Enhancements Introduced

1. Real-time Email and SMS Notifications for OTP Consent Access:

Taxpayers will now receive immediate notifications via email and/or SMS whenever an ASP successfully obtains their consent to access their GST data over APIs. This consent is secured through a One-Time Password (OTP) provided by the GST System. This crucial enhancement ensures that the authorized signatory of the taxpayer is instantly aware of any successful data access requests.

The notification will include vital details to help taxpayers identify and verify the access:

• Name of the ASP and the underlying GSP: Clearly identifying the entities requesting and facilitating access.
• Date and Time of the OTP Consent: Providing a precise timestamp of when the consent was granted.
• Validity Period of the Consent: Informing the taxpayer about the duration for which the ASP has been granted access to their data.

This proactive notification system empowers taxpayers to detect and flag any unauthorized or suspicious access attempts immediately, significantly bolstering their data security.

2. Enhanced GST Common Portal for Access Management:

To further empower taxpayers with comprehensive oversight, the GST Common Portal has been enhanced to provide a consolidated view of ASP/GSP access. Upon logging into their GST Common Portal dashboard, taxpayers will now be able to:

• View Current and Historic Access: Gain a complete overview of all instances where ASPs/GSPs have accessed their data, both currently active and in the past. This historical log provides a transparent audit trail of all data interactions.
• Revoke Any Active Consent: In a groundbreaking move, taxpayers are now equipped with the ability to revoke any active consent granted to an ASP/GSP directly from their dashboard. This feature provides ultimate control, allowing taxpayers to immediately cut off access if they deem it necessary, for instance, due to a change in service provider, security concerns, or simply to manage their data permissions more granularly.

Impact and Future Outlook

These enhancements represent a significant step forward in securing taxpayer data and fostering a more transparent ecosystem within the GST System. By providing real-time alerts and robust control mechanisms, the GST System reiterates its commitment to safeguarding taxpayer information and building trust in digital interactions.

The exact dates for the availability of these functionalities were published via respective advisories prior to their implementation on July 17th, 2025. Taxpayers are strongly encouraged to familiarize themselves with these new features and regularly review their access permissions on the GST Common Portal to leverage these security enhancements to their fullest extent.

The GST System will continue to explore and implement further advancements to ensure a secure and efficient tax compliance environment for all stakeholders.

FAQs on GST System Enhanced Security and Transparency

What is the purpose of the new GST system enhancements effective from July 17, 2025?
The enhancements aim to improve data security and transparency, giving taxpayers control over how ASPs and GSPs access their GST data.

What are ASPs and GSPs in the GST system?
ASPs (Application Suvidha Providers) help taxpayers interact with GST, while GSPs (GST Suvidha Providers) are authorized API channel partners enabling ASP connectivity with the GST System.

What is the key feature introduced for taxpayers in terms of data access notifications?
Taxpayers will receive real-time email and SMS alerts whenever an ASP obtains OTP-based consent to access their GST data.

What information will the real-time notifications include?
Notifications will include the ASP and GSP names, date and time of OTP consent, and the validity period of the consent.

How do these notifications help taxpayers?
They allow taxpayers to detect and flag unauthorized or suspicious access attempts immediately, improving data security.

What changes have been made to the GST Common Portal under these enhancements?
The portal now allows taxpayers to view current and historic ASP/GSP data access and manage or revoke active consents directly.

Can taxpayers revoke ASP/GSP access themselves now?
Yes, taxpayers can revoke any active ASP/GSP consent from their GST Common Portal dashboard if needed.

Why would a taxpayer need to revoke ASP/GSP access?
Reasons include changing service providers, security concerns, or wanting tighter control over who accesses their GST data.

What is the benefit of viewing current and historic ASP/GSP data access?
It provides a transparent audit trail, helping taxpayers monitor who has accessed their data and when.

How will these enhancements impact taxpayers?
They empower taxpayers to secure their data, maintain transparency in interactions, and build trust in the digital GST system.

Are these features mandatory to use for taxpayers?
While using them is not mandatory, taxpayers are strongly encouraged to monitor their data access to leverage these security enhancements.

Do taxpayers need to update any information to receive the alerts?
Taxpayers should ensure their registered email and mobile number in the GST portal are updated to receive real-time notifications.

How does the OTP consent mechanism work in this context?
When an ASP seeks to access data, the taxpayer receives an OTP from the GST system. Once provided, the ASP can access the data within the validity period.

Will there be any charges for using these enhanced features?
No, these security and transparency enhancements are provided by the GST System without additional charges to taxpayers.

Where can taxpayers view and manage their ASP/GSP consents?
Taxpayers can log in to their GST Common Portal dashboard to view, track, and revoke ASP/GSP consents.

What should taxpayers do if they detect unauthorized access?
They should immediately revoke the ASP/GSP consent from the portal and report the issue to the GST helpdesk for further action.

What steps should taxpayers take to prepare for these enhancements?
Taxpayers should familiarize themselves with the new features, review their current ASP/GSP consents, and keep contact details updated in the GST portal.

Will the GST System implement further advancements in security?
Yes, the GST System will continue to explore and implement enhancements to ensure secure and efficient compliance for taxpayers.