Why in News

The supplied report discusses the minutes of the RBI Monetary Policy Committee meeting held on 5–7 October 2026. All six members supported a 25 basis point increase in the repo rate to 5.50%. Nagesh Kumar and Ram Singh differed on changing the stance from neutral to calibrated tightening. Agreement on the immediate rate decision therefore coexisted with disagreement about the policy signal.

The official minutes, released on 21 October 2026, confirm the decision and the two members’ preference for a neutral stance. They explain calibrated tightening as allowing a hike or pause under the prevailing outlook, rather than precommitting to a fixed sequence of increases.

The attachment reports that core inflation rose to 4.2% in August from 3.9% in July, while underlying inflation excluding precious metals was 2.9%. These measures cover different baskets. A low value for one measure does not cancel the information in the other.

UPSC Syllabus Linkage

• GS III: Inflation, monetary policy, growth, banking, external shocks and resource mobilisation.
• GS II: Statutory institutions and accountability through reasoned decisions and publication of minutes.
• Prelims: Repo rate, basis points, CPI, MPC composition, inflation targeting and monetary transmission.
• Essay: The relationship between stable prices, livelihoods and economic opportunity.

Core Concepts

Inflation is a sustained increase in the general price level. A rise in the price of one vegetable is a relative price change; inflation becomes broad when many goods and services become more expensive. Falling inflation means prices are rising more slowly. It does not necessarily mean prices are falling.

Headline CPI inflation measures the change in the consumer price index covering its full basket. Core inflation usually excludes food and fuel. Researchers may also exclude precious metals to examine underlying pressures. Always identify the basket before comparing figures.

First-round effects are the direct effects of a shock. For example, costlier imported oil raises fuel and transport costs. Second-round effects arise when firms raise wider prices or workers seek higher wages in response, making the initial shock more persistent. Such effects are possible, not automatic.

Inflation diffusion asks how widely price increases are spread across items. The attachment’s rise from 20% in March to 37% in August is a change in the share of basket items described in the report, not a 37% inflation rate. The RBI minutes refer more precisely to a weighted share. A diffusion measure and the headline rate answer different questions.

Historical Background

India earlier relied on several monetary indicators and administrative instruments. High and persistent inflation strengthened the case for a clearer nominal anchor. The 2014 expert committee chaired by Urjit Patel recommended a framework centred on CPI inflation. A monetary policy framework agreement followed in 2015, and amendments to the RBI Act in 2016 created the statutory MPC framework.

The aim is price stability while keeping growth in mind. Flexible inflation targeting allows consideration of supply shocks and the time needed for policy to work. It does not mean inflation must equal the target every month. An RBI Deputy Governor’s May 2026 speech records renewal of the 4% target with a tolerance range of 2–6% through March 2031.

Constitutional and Statutory Framework

The MPC comprises the RBI Governor, the Deputy Governor in charge of monetary policy, an RBI officer nominated by its Central Board, and three external members appointed by the Central Government. Its statutory remit concerns the policy rate needed to achieve the inflation target. Broader banking regulation and every liquidity operation are not decisions of this committee.

The framework treats inflation outside the tolerance limits for three consecutive quarters, measured through quarterly averages, as failure for accountability purposes. Reaching 6% in one projected quarter is neither a realised breach above 6% nor proof that the failure condition has been met.

How Policy Reaches the Economy

A higher repo rate can raise money-market rates, deposit rates and borrowing costs. Households may postpone interest-sensitive purchases, and firms may reconsider some investments. Slower demand can reduce the ability to pass on cost increases. Policy communication can also affect expectations before all bank rates adjust.

Transmission is uneven. Loan contracts reset at different times; banks have different funding structures; informal borrowers may not benefit from transparent benchmark rules. A nominal rate change should therefore be analysed with credit conditions, expected inflation and actual lending rates.

An interest-rate increase cannot directly produce more oil or repair disrupted shipping. Its useful role during a supply shock is to prevent persistent inflation expectations and excess demand from reinforcing that shock. Supply measures, including better logistics and targeted support, operate through different channels.

Prelims Facts and Traps

• The inflation target is 4%; 6% is the upper tolerance limit, not the target.
• A 25 basis point change is 0.25 percentage point.
• CPI reflects consumer prices; wholesale price inflation is a different measure.
• Core inflation is not the statutory target merely because it is analytically useful.
• A unanimous rate vote does not imply unanimity on stance or reasoning.
• A forecast is conditional; it is not an observed inflation outcome.

Why in News

The attachment reports compromise of private keys associated with eight eMudhra intermediate certificates. It describes extremely weak key values and responses by browser and operating-system providers. This concerns the infrastructure used to verify websites and software, rather than proof that all websites using the company’s services were breached.

CERT-In’s 21 October advisory distinguishes the affected global certificate business from the domestic DSC and eSign services regulated by the Controller of Certifying Authorities, which it says were not impacted. It identifies inadequate randomness during key generation, rather than a weakness in the P-384 algorithm itself.

Google’s original incident statement records blocking of affected keys and a planned removal of the related emSign ECC Root CA G3 from its root store on 27 October 2026. Removing trust in a root is a protective decision; it does not establish that the root’s private key was compromised. Some legitimate services may need replacement certificates because their trust chain passes through that root.

UPSC Syllabus Linkage

• GS III: Cybersecurity, communication networks, technology and risks to critical services.
• GS II: Digital governance, accountability and regulation across borders.
• GS IV: Professional competence, responsible disclosure and public trust.
• Prelims: Public and private keys, TLS, certificate authorities and trust stores.

Concepts and Background

A website certificate binds a public key to an identity such as a domain name. A trusted certificate authority signs this association. The browser verifies the chain and other conditions before accepting it. This supports authentication and encrypted communication, but a valid HTTPS connection does not certify that the business itself is honest.

Public key infrastructure, or PKI, combines technical systems, identity checks, certificate policies and governance. Its strength depends on both sound algorithms and sound implementation. A key written in a large storage field can still be weak if its actual value is predictable.

Historically, internet security moved from SSL to modern TLS, but “SSL certificate” remains common informal usage. Trust chains allow a small set of trust anchors to support many services. This improves scale while creating concentration risk: a flaw at an issuing authority may require coordinated action across different vendors and devices.

Constitutional and Legal Relevance

The IT Act gave legal recognition to electronic records and signatures. Its 2008 amendments broadened the electronic-signature framework and strengthened cybersecurity institutions. The statutory scheme and browser trust policies may interact, but operate through different legal and technical arrangements.

Understanding the Failure

Cryptographic entropy means unpredictability in key generation. If a key is chosen from a tiny set of possibilities, its nominal bit length does not deliver the expected security. Padding a small number with zeros does not create randomness. The report’s numerical examples illustrate this failure; they should not be interpreted as a general flaw in elliptic-curve mathematics.

There are several separate questions: Were issuing keys recoverable? Did the affected CAs issue certificates? Were fraudulent certificates used? Which clients remained exposed? The company’s assertion that no end-entity certificates were issued does not remove the need to block a compromised authority capable of signing new ones. Conversely, a vulnerability does not prove customer data was actually stolen.

The attachment says many government services use eMudhra technology. That fact alone does not establish that those services relied on an affected intermediate or that Aadhaar or tax databases were compromised. Evidence must trace the actual certificate hierarchy and affected service.

Prelims Facts and Traps

• Public keys are designed to be public; private keys must remain secret and unpredictable.
• Key length and randomness are different properties.
• Root compromise, intermediate compromise and root distrust are different events.
• A certificate authenticates a technical identity under a trust model; it does not guarantee truthful website content.
• Revocation has practical value only if clients can obtain and act on it.
• CERT-In response and CCA oversight have different roles.

Why in News

The attachment records Delhi’s official 24-hour average AQI at 245 at 4 p.m. on 21 October 2026, up from 179 a day earlier. CAQM invoked Stage I of GRAP. The report highlights restrictions on routine use of diesel generators and specified intercity or interstate buses.

The official GRAP schedule was revised on 29 September 2026. It should be used instead of assuming that every measure in an older winter schedule remains unchanged. It allows action based on sustained forecasts and provides for cumulative restrictions as higher stages are invoked.

The attachment also quotes ministerial claims about clean-air days, plantation numbers and sapling survival. These are reported administrative claims. They do not independently establish lower personal exposure or prove the effectiveness of a specific intervention.

UPSC Syllabus Linkage

• GS III: Pollution, environmental degradation, conservation and disaster preparedness.
• GS II: Intergovernmental coordination, statutory bodies, urban governance and public service delivery.
• GS I: Urbanisation, settlement patterns and physical geography of winter pollution.
• Prelims: AQI categories, pollutants, GRAP stages and CAQM.

Core Concepts

Emissions are pollutants released from sources. Ambient concentration is the amount present in surrounding air. Exposure depends on the concentration a person actually encounters and the time spent there. A reduction in emissions can improve concentrations, but weather and transport of pollution also affect the result.

An airshed is a region whose pollution sources and atmospheric movement influence shared air quality. It need not follow State boundaries. Delhi’s problem therefore requires action across the NCR and surrounding source regions, not only within municipal limits.

Winter often brings lower mixing heights and weaker winds, which reduce dispersion. A temperature inversion can trap pollutants close to the ground. Weather influences accumulation; it does not create all the emissions being trapped. Dust, transport, industry, waste burning and seasonal burning must be analysed with location and season in mind.

AQI and GRAP

The national AQI considers PM10, PM2.5, nitrogen dioxide, sulphur dioxide, carbon monoxide, ozone, ammonia and lead. Pollutant concentrations are converted into sub-indices, and the worst sub-index determines overall AQI when data sufficiency requirements are met. AQI is not the arithmetic mean of eight pollutant readings. The CPCB method requires at least three monitored pollutants, including PM2.5 or PM10, for the relevant calculation.

National AQI has six public categories. GRAP has four response stages for deteriorating Delhi air quality. “Severe plus” is a GRAP response label above 450; it is not an additional seventh category in the standard six-category national AQI scheme.

Historical and Legal Background

The Water Act 1974 created the pollution control board framework. The Air Act 1981 extended pollution-control responsibilities to air. The Environment Protection Act 1986 provides a broader central environmental framework. GRAP developed as an emergency response mechanism, while the CAQM Act 2021 created a dedicated regional statutory institution.

The CAQM Act 2021 provides regional coordination and regulatory powers. Section 12 concerns the Commission’s powers and functions; Section 14 addresses penalties subject to the Act’s conditions. CPCB, State pollution control boards, transport agencies, municipal bodies and power distribution companies retain implementation roles. CAQM is a statutory body, not a constitutional commission.

What Stage I Means in This Report

Stage I emphasises enforcement of dust rules, prevention of open burning, vehicle checks, traffic management and reliable power supply. The September 2026 schedule directs that diesel generators should not serve as a regular source of electricity. This should not be rewritten as a universal ban on every generator use regardless of applicable conditions.

The schedule restricts specified intercity or interstate buses entering or operating in Delhi-NCR to EV, CNG or BS VI diesel categories from the listed States and territories. The inclusion of BS VI diesel means the measure is not an “electric buses only” rule. Check route, vehicle category, geography and current directions before applying a simplified headline. [R7]

Invoking Stage I does not automatically impose every construction or vehicle restriction associated with Stages III or IV. Conversely, higher stages add to lower-stage actions. Forecast-based invocation is intended to act before prolonged severe conditions occur.

Prelims Facts and Traps

• AQI 245 lies in the Poor category; it is not a measurement of PM2.5 at 245 micrograms per cubic metre.
• AQI and the pollutant concentration are different quantities.
• Ozone is included in AQI; carbon dioxide is not one of its eight pollutants.
• GRAP Stage III begins at 401 and Stage IV above 450 in the verified schedule.
• CPCB was established under the Water Act, not first created by the Air Act.
• Planting totals and sapling survival are different indicators; neither alone measures ambient air quality.

Why in News

The headline rounds the count. The report’s body identifies 3,897 customer records containing personally identifiable information among approximately 3,75,000 records examined. It says SBI received alerts on 16 October and disclosed the matter to stock exchanges on 21 October 2026. The source and full extent of exposure remained under investigation.

The reported fields include names, contact details, dates of birth, addresses and banking-related identifiers. SBI said its core business functions continued normally and engaged an independent CERT-In-empanelled agency. Normal operations do not establish that affected customers face no privacy or impersonation risk.

The Internet Freedom Foundation’s criticism and the separate claim about 2,722 PDF documents are allegations reported in the attachment. They are not treated here as findings confirmed by the bank or an independent forensic report. The original exchange filing was not independently retrieved; the news summary remains the source for incident-specific numbers.

UPSC Syllabus Linkage

• GS III: Cybersecurity, financial infrastructure, internal security and technology risks.
• GS II: Accountability, citizen services, regulation and privacy.
• GS IV: Duty of care, transparency and ethical communication during uncertainty.
• Prelims: PII, data breach, CERT-In, financial regulators and legal commencement.

Concepts and Historical Background

Personally identifiable information, or PII, is information that identifies or can help identify an individual. Combining a name, phone number, date of birth and account-related details can make impersonation more convincing even when passwords are absent.

Dark web refers to services accessed through specialised networks that conceal aspects of location or identity. It is not synonymous with the entire deep web, which includes ordinary non-indexed content such as private account pages. Finding a data sample on a hidden forum raises questions of authenticity, origin and duplication; it does not by itself establish which system was accessed.

Digital banking expanded access and convenience but increased reliance on software, vendors and shared data flows. The IT Act 2000 supplied an early legal framework. CERT-In’s statutory functions and later directions added incident-response obligations. The 2017 privacy judgment and the DPDP Act 2023 further shaped the rights and governance debate.

Constitutional and Legal Framework

Article 21 protects privacy as a fundamental right, recognised by the nine-judge Bench in Justice K S Puttaswamy Retd v Union of India, 2017. Privacy includes interests in how personal information is collected and used. It is not absolute; State interference must satisfy constitutional standards, including legality and proportionality. Article 14 supports non-arbitrary public administration. Article 19(1)(a) can be relevant to public accountability, while individual customer notice is a separate statutory and ethical question.

IT Act Section 70B establishes CERT-In’s national incident-response role. The 28 April 2022 directions require specified entities to report listed incidents within six hours of noticing them or being informed about them. This is not a universal six-hour deadline for every customer notice or stock-exchange filing. Those are separate channels with their own applicable rules.

Banking and securities oversight: RBI supervises regulated banks and their relevant technology-risk arrangements. CERT-In handles national cyber incident response. SEBI and stock exchanges govern listed-entity disclosure requirements. An outside cybersecurity assessment assists investigation but does not transfer management’s accountability to the assessor.

Important Commencement Check

The DPDP Act 2023 and the DPDP Rules 2025 use phased commencement. The Gazette notification dated 13 November 2025 brings major substantive processing obligations, including Section 8, into force eighteen months after publication. The Rules similarly delay several operational requirements. As of 22 October 2026, the eighteen-month period has not elapsed.

Therefore, do not claim that every DPDP safeguard, customer breach-notification duty or penalty is already enforceable for this incident merely because the Act was passed in 2023. Section 8’s future framework concerns reasonable security safeguards and breach intimation, but its commencement matters. Existing IT, banking and other applicable duties must be analysed separately. This is a timing distinction, not a conclusion that institutions have no present duty of care.

Reading the Numbers Correctly

3,897 is approximately 1.04% of 3,75,000. This is a descriptive ratio of identified records to examined records in the report. It is not an established percentage of all SBI customers affected, nor proof that the other records are harmless. Some records could duplicate people or relate to other material. The denominator must always be stated.

A five-day interval between an alert and an exchange filing does not alone prove violation of CERT-In’s six-hour rule. One would need the actual incident classification, notice time and reporting record. The attachment does not supply that full timeline. At the same time, uncertainty does not justify withholding practical, accurate information from exposed customers while investigation continues.

Prelims Facts and Traps

• PII exposure can facilitate fraud even without disclosure of a PIN or password.
• Confidentiality, integrity and availability are separate security objectives.
• A bank may remain operational while confidentiality is affected.
• CERT-In empanelment is not a guarantee that a breach cannot occur or that every finding is final.
• Rows, files, records, accounts and unique persons are different units.
• Act passage, notification and commencement are distinct legal stages.

Why in News

The attachment analyses the Supreme Court’s 15 October 2026 judgment concerning reservation after religious conversion. Its broad opening description needs to be read with the actual question decided: whether prior backward status and conversion alone establish membership in a particular notified Backward Class Muslim community.

The case is The Secretary to Government v Sameer Ahamed N and Others, 2026 INSC 1129, SLP Civil 25507 of 2026, decided by Justices Prashant Kumar Mishra and Shree Chandrashekhar. The Court dismissed the State’s special leave petition and sustained the quashing of the relevant Tamil Nadu Government Order.

The official PDF was identified but timed out during retrieval. The judgment’s reproduced document text was read, including its concluding principles. That primary-text reproduction is distinguished from the hosting site’s editorial summary.

UPSC Syllabus Linkage

• GS II: Equality, affirmative action, freedom of religion, judicial review, backward-class institutions and Centre–State roles.
• GS I: Caste, social stratification, religious diversity and persistence of disadvantage.
• GS IV and Essay: Fair access to public benefits, dignity, evidence and administrative impartiality.
• Prelims: Articles 15, 16, 25, 338B, 340, 341, 342 and 342A; constitutional amendments and commissions.

The Case in Context

A person sought recognition as a member of a specified Backward Class Muslim community after converting from Hinduism to Islam. Tamil Nadu’s Government Order dated 9 March 2024 supplied a route for certain converts previously belonging to backward categories to receive such certificates.

The State argued that its measure preserved existing reservation benefits. The Court distinguished continuing personal disadvantage from legally established membership of a different notified community. It also held that the State could not conclusively delegate statutory status determination to a private religious body. A religious conversion certificate and a public community certificate perform different functions.

The concluding principles reject carrying earlier status into a different backward class merely through conversion. They also require a fact-specific determination in reconversion cases. The judgment should not be rewritten as a finding that all Muslims or Christians are ineligible for OBC reservation. Nor does it establish that changing faith instantly removes every social or economic disadvantage. The issue is the legal basis of the particular entitlement.

Concepts and Historical Background

Formal equality applies the same rule to everyone. Substantive equality recognises that historically excluded groups may need targeted measures to access real opportunities. Reservation is one instrument; education, scholarships, anti-discrimination enforcement and public services also matter.

Caste, class and religion are different concepts. A backward class may be identified through socially relevant evidence, and caste can be an important indicator. Religious identity alone neither proves nor disproves membership of a particular listed backward community. Theology and observed social hierarchy must also be distinguished.

The attachment’s statement that OBC classification began only after the 1992 judgment compresses a much longer history. Backward-class measures and identification existed earlier. Indra Sawhney was a major constitutional review of the central policy, not the invention of every State backward-class framework.

The 11 social, educational and economic indicators belong to the Mandal Commission’s historical methodology. They should not be presented as a single mandatory contemporary test used identically by every State and every authority. Certificate forms and list descriptions also vary; the attachment’s assertion that no State form asks religion is not independently established here.

Constitutional Reference

Articles 15(4) and 16(4) are enabling provisions with different fields. An educational-admission question should not simply be answered as if it concerned only public employment. Article 141 concerns law declared by the Supreme Court; a newspaper’s interpretation is not itself the binding holding. Article 226 explains High Court judicial review.

SC ST and OBC Are Different Frameworks

The Sikh and Buddhist extensions to the SC Order occurred through legislation in 1956 and 1990. They should not be described merely as new religions added by the original 1950 text. SC eligibility is not governed by the same mechanism as OBC identification. A constitutional challenge to a rule is also distinct from the rule’s presently applicable text.

Indra Sawhney and the Present Debate

The 1992 nine-judge decision upheld the central OBC reservation framework with important qualifications, including exclusion of the creamy layer. It recognised the relevance of caste in identifying backward classes while requiring attention to backwardness. Its general approach to the 50% limit must be stated with its context and later constitutional developments; this chapter does not claim that every category of reservation is governed identically.

The 2026 report debates whether emphasis on the source of backwardness changes how religion-neutral identification is understood. For Mains, explain the legal holding before presenting this critique. A two-judge Bench cannot overrule a nine-judge Bench; where interpretations appear in tension, accurately identify the issue rather than declaring a larger precedent erased.

Prelims Facts and Traps

• NCBC is constitutional under Article 338B; the MPC is statutory under the RBI Act.
• Article 340 concerns backward-class commissions; Article 342A concerns SEBC lists.
• The 102nd and 105th Amendments perform different roles.
• The Mandal Commission’s historical indicators are not a universal modern certificate checklist.
• OBC reservation is not reserved exclusively for Hindus.
• Religious conversion alone does not prove membership of a particular listed community.
• A community certificate records legally established status; it cannot create status contrary to substantive requirements.