Applying for a PAN and correcting errors

The Permanent Account Number — PAN — is the income-tax identifier issued under Section 139A of the Income-tax Act, 1961 read with Rule 114 of the Income-tax Rules, 1962. Application for a fresh PAN, the mandatory Aadhaar–PAN linkage introduced by Section 139AA in 2017, and the correction of demographic errors all run on Forms 49A and 49AA notified by the Central Board of Direct Taxes. The Aadhaar–PAN linkage was upheld by the Supreme Court in Binoy Viswam v Union of India, (2017) 7 SCC 59 on Article 14 and Article 19 grounds, with the Article 21 question carried forward to and resolved in Justice K S Puttaswamy (Retd) v Union of India, (2019) 1 SCC 1. Section 272B supplies the penalty regime for non-compliance, Rule 114B catalogues the transactions for which the PAN must be quoted, and the Digital Personal Data Protection Act, 2023 overlays the data-protection framework.

The Permanent Account Number is the foundational identifier of the income-tax administration in India. Section 139A of the Income-tax Act, 1961 obliges every person whose total income exceeds the maximum amount not chargeable to tax, every person carrying on a business or profession whose total sales or gross receipts exceed the prescribed threshold, and every person required to furnish a return under Section 139(4A), to apply to the Assessing Officer for the allotment of a PAN. Section 139A(1A), inserted by the Finance Act 2018, extended the obligation to any person who enters into a financial transaction of an aggregate amount of two-and-a-half lakh rupees or more in a financial year. The PAN is the ten-character alphanumeric identifier (four alphabets, five digits, one alphabet — the fourth alphabet indicating the type of holder) generated by the Income-tax Department; it is recorded on the laminated PAN card and now also on the e-PAN PDF that the holder may download from the e-filing portal. Section 139AA, inserted by the Finance Act 2017, made the quoting of the Aadhaar number a condition precedent to the application for a PAN and the filing of an income-tax return for every resident assessee. The Supreme Court upheld this in Binoy Viswam v Union of India, (2017) 7 SCC 59 — Sikri J for the Bench reading the linkage as a proportionate response to a long-standing problem of duplicate PANs and fraudulent income reporting. The Article 21 challenge, kept open at the time, was decided against the petitioner in Puttaswamy II, (2019) 1 SCC 1. This article walks the application, correction and linkage architecture.

Section 139A — who must apply, the categories, the deadline

Section 139A casts five distinct application obligations on different classes of person. First, under Section 139A(1), every person whose total income (before allowing any deduction under Chapter VIA) exceeds the maximum amount not chargeable to tax in any previous year is obliged to apply for the allotment of a PAN within the time prescribed by Rule 114(3) — typically by the 31st day of May following the previous year in which the income first crossed the threshold. Second, every person carrying on a business or profession whose total sales, turnover or gross receipts exceed five lakh rupees in any previous year is required to apply, again within the Rule 114(3) window. Third, every person required to furnish a return of income under Section 139(4A) — that is, every trust, charity or institution required to file under the Section 12A regime — is required to apply.

Fourth, Section 139A(1A) — inserted by the Finance Act 2018 with effect from 1 April 2018 — created the financial-transactions trigger. Any person who is not otherwise required to apply but who enters into a transaction of an aggregate value of two-and-a-half lakh rupees or more in a financial year, and any managing director, director, partner, trustee, author, founder, karta, chief executive officer, principal officer or office bearer of such a person, is required to apply. The intent was to bring within the PAN net every individual transacting at a material level, irrespective of the income test. Fifth, Section 139A(3) authorises a voluntary application — any person, even if not required by sub-sections (1), (1A) or (4A), may apply for a PAN, and the Assessing Officer is required to allot it.

The Assessing Officer also has a residual power under Section 139A(2) to allot a PAN suo motu to any person where, on the basis of information in his possession, he is satisfied that such a person is required to obtain a PAN. This residuary route has been used historically to bring within the system high-value transactors flagged by the Annual Information Return (now the Statement of Financial Transactions under Section 285BA read with Rule 114E).

Section 139AA — the Aadhaar–PAN linkage and the Binoy Viswam test

Section 139AA, inserted by the Finance Act 2017, supplied the second leg of the PAN regime. Sub-section (1) requires every person who is eligible to obtain an Aadhaar number to quote the Aadhaar number in (a) the application for a PAN, and (b) the return of income. Sub-section (2) — the more contested provision — required every PAN holder to intimate the Aadhaar number to the Income-tax authority on or before a date notified by the Central Government, failing which the PAN allotted "shall be deemed to be invalid" from a date to be notified. The provision was challenged on three constitutional grounds: Article 14 (arbitrariness — the linkage was disproportionate to the duplicate-PAN problem); Article 19(1)(g) (right to carry on profession — a PAN was a tool of trade and its invalidation would impair the right); and Article 21 (privacy and informational self-determination).

The Supreme Court in Binoy Viswam v Union of India, (2017) 7 SCC 59 — Sikri J for himself and Bhushan J — dismissed the Article 14 and Article 19 challenges. On Article 14, the Bench held that the linkage had a rational nexus with the legitimate aim of curbing duplicate PANs, money-laundering and benami transactions; the Department's affidavit on the de-duplication exercise had pointed to a substantial number of duplicate PANs requiring elimination. On Article 19(1)(g), the Bench held that the linkage was a reasonable restriction within Article 19(6); the legislature was within its competence to prescribe a verification condition for the use of a tax-administration identifier. On Article 21, the Bench expressly held the question over, observing that the constitutional content of privacy was then pending before the larger nine-judge Bench in Puttaswamy. The 2017 ruling, however, partially stayed Section 139AA — holding that the PAN of an assessee who had not yet enrolled for Aadhaar could not be invalidated retrospectively before the larger Bench had decided the privacy question.

The Article 21 question was answered in Justice K S Puttaswamy (Retd) v Union of India, (2019) 1 SCC 1 — the Aadhaar 5-Judge Bench. The 4:1 majority (Sikri J, joined by Khanwilkar and Bhushan JJ; Chandrachud J dissenting) applied the three-fold proportionality test laid down in the nine-judge Puttaswamy I, (2017) 10 SCC 1 — legality, legitimate aim, proportionality — to the Aadhaar Act and to Section 139AA. The Bench held the Section 139AA linkage proportionate. The legality limb was satisfied by Section 139AA itself; the legitimate-aim limb was satisfied by the de-duplication and tax-administration goal; the proportionality limb was satisfied because the linkage was confined to PAN allotment and return filing, did not involve disclosure of biometric or core information to private parties, and operated under the strict-purpose framework of the Aadhaar Act. The Chandrachud J dissent reached the opposite conclusion on the proportionality limb but did not carry the day.

The operational consequence is that an Indian resident assessee who has obtained or is eligible for an Aadhaar number must link it to the PAN. The PAN of a person who fails to do so by the notified deadline becomes "inoperative" — the operational expression that the CBDT has used in successive notifications since 2022. The legal effect of "inoperative" is not the same as "invalid"; the PAN continues to exist on the Income-tax Department's database, but the holder faces consequences that are explored further below.

Rule 114 — Form 49A, Form 49AA, the documents

Rule 114 of the Income-tax Rules, 1962 — read with the CBDT's successive notifications culminating in Notification No. 56/2014 — supplies the application architecture. Rule 114(1) lists the forms: Form 49A for an Indian citizen, Hindu undivided family, body of individuals, association of persons, or any other person resident in India; Form 49AA for a foreign citizen or a person not resident in India. Rule 114A is the parallel route for an allotment to a non-resident person whose application is routed through a designated authority. Rule 114(4) lists the supporting documents — proof of identity, proof of address, proof of date of birth — that must accompany the application; the CBDT notification specifies the catalogue (Aadhaar card, passport, voter ID, driving licence, ration card with photograph, arms licence, photo identity card issued by a public-sector undertaking, and so on).

The application channels are three. First, the online route through the Income-tax Department's e-filing portal (incometax.gov.in) — for an instant e-PAN using the Aadhaar–OTP authentication route, available only to individuals who have a valid Aadhaar with the mobile number registered. Second, the online route through the designated PAN service providers (NSDL e-Governance / Protean and UTIITSL) — both for residents on Form 49A and for non-residents on Form 49AA, with the option of paperless eKYC (using Aadhaar–OTP) or the document-upload route. Third, the paper route at the Tax Information Network – Facilitation Centres (TIN-FC) operated by the same service providers — used principally for applicants without an Aadhaar number or where the online route fails.

The application carries a fee — currently a few hundred rupees for an Indian address and a higher amount for an overseas address — and is processed within fifteen working days as a routine matter. The instant e-PAN through the e-filing portal is, in fact, near-instantaneous — the PDF is generated on successful authentication. The physical card is despatched to the address on the application; the e-PAN PDF carries the QR code that encodes the demographic information and serves as a valid PAN document for all statutory purposes.

The fourth alphabet of the PAN encodes the type of holder: 'P' for an individual, 'C' for a company, 'H' for a Hindu undivided family, 'F' for a firm, 'A' for an association of persons, 'T' for a trust, 'B' for a body of individuals, 'L' for a local authority, 'J' for an artificial juridical person, 'G' for a government. The fifth character is the first letter of the holder's surname (for an individual) or the entity's name (for a non-individual). A PAN whose fourth character does not match the holder type is a structural error and is the most common ground on which an Assessing Officer flags a PAN at the validation stage.

Correction — the demographic-update route

Errors and updates to a PAN — change of name on marriage, correction of date of birth, address change, or correction of the father's name — run through the "Request for New PAN Card or/and Changes or Correction in PAN Data" form, currently maintained as a variant of Form 49A. The application is filed on the same e-filing or service-provider channels, with the existing PAN quoted, the fields to be changed ticked, and supporting documents enclosed. The change cycle is typically completed within fifteen working days. A new PAN card is then issued with the corrected demographic information; the PAN number itself does not change.

Three categories of correction are common in practice. First, name changes — for women on marriage, supported by the marriage certificate issued by the Marriage Officer or Registrar under the Hindu Marriage Act, 1955 (Section 8) or the Special Marriage Act, 1954 (Section 13), or by a gazette notification. Second, date-of-birth corrections — supported by the birth certificate issued under the Registration of Births and Deaths Act, 1969 (now revised by the 2023 amendment), or the SSLC or matriculation certificate. Third, address updates — supported by any of the documents in Rule 114(4) read with the CBDT notification. The correction does not generate a new PAN; the existing PAN is retained, and only the demographic information stored against it is updated.

A correction that touches the fourth alphabet of the PAN (the holder-type indicator) cannot be processed through this route — it is a structural error that requires a fresh PAN application and the surrender of the old one. The same applies where an applicant has been allotted two PANs (a duplicate) — Section 139A(7) prohibits the holding of more than one PAN, and the holder is required to surrender the additional PAN by writing to the Assessing Officer or through the e-filing portal's "Request for PAN Surrender" module. A failure to surrender a duplicate PAN exposes the holder to the penalty under Section 272B (currently ten thousand rupees per instance).

Rule 114B — where the PAN must be quoted, and the consequences of not

Rule 114B of the Income-tax Rules, 1962 catalogues the financial transactions for which the PAN must be quoted. The list is extensive and is amended from time to time; the principal categories as currently in force are: (a) sale or purchase of any motor vehicle (other than a two-wheeler); (b) opening of a bank account (other than a basic savings deposit account); (c) opening of a demat account; (d) payment to a hotel or restaurant against a bill exceeding fifty thousand rupees at any one time; (e) payment in connection with travel to a foreign country exceeding fifty thousand rupees at any one time; (f) payment for any product or service exceeding two lakh rupees (for cash); (g) payment to a mutual fund for purchase of units exceeding fifty thousand rupees; (h) payment to a company for acquiring debentures, bonds or shares exceeding fifty thousand rupees; (i) payment to the Reserve Bank of India for acquiring bonds exceeding fifty thousand rupees; (j) deposit in cash with a bank or post office exceeding fifty thousand rupees in a day, or aggregating to more than two-and-a-half lakh rupees during the demonetisation window; (k) purchase or sale of immovable property exceeding ten lakh rupees; (l) sale or purchase of goods or services (other than those listed) for an amount exceeding two lakh rupees per transaction.

Where the transactor does not have a PAN, Rule 114B permits the furnishing of Form 60 — a self-declaration that the transactor is not required to obtain a PAN, supported by proof of identity and address. The Form 60 architecture has been progressively narrowed; the 2018 amendment requires the transactor to apply for a PAN within the statutory window after entering into the Section 139A(1A) transaction. Rule 114BB, inserted in 2022, prescribes mandatory Aadhaar authentication for certain transactions exceeding twenty lakh rupees in a financial year — cash deposits or withdrawals at a bank or post office, and the opening of a current account.

The consequence of failing to quote the PAN where required, or of quoting a false PAN, is the penalty under Section 272B of the Income-tax Act, 1961 — ten thousand rupees per default. Section 272B(1) is invoked where a person has failed to comply with the provisions of Section 139A; Section 272B(2) is invoked where a person has not intimated his Aadhaar number under Section 139AA(2); Section 272B(2A) — inserted by the Finance Act 2019 — is invoked where a person has knowingly quoted or intimated a number which is false. The penalty is leviable by the Assessing Officer after providing a reasonable opportunity of being heard.

Section 285BA — the Statement of Financial Transactions and Rule 114E

The PAN regime operates alongside the reporting regime under Section 285BA of the Income-tax Act, 1961 read with Rule 114E of the Income-tax Rules. Section 285BA requires specified persons — banks, post offices, sub-registrars, listed companies, mutual funds, NBFCs, foreign-exchange dealers and other reporting entities — to furnish a Statement of Financial Transactions (SFT) to the Income-tax Department. Rule 114E specifies the categories and the monetary thresholds: cash deposits aggregating to ten lakh rupees or more in a savings account, cash deposits or withdrawals aggregating to fifty lakh rupees or more in a current account, time deposits aggregating to ten lakh rupees or more, credit-card payments aggregating to one lakh rupees in cash or ten lakh rupees overall, mutual fund purchases of ten lakh rupees or more, and so on.

The SFT is filed annually by the reporting entity in Form 61A and is anchored on the PAN of the customer. Where the customer has not quoted a PAN, the reporting entity must report the transaction along with the Form 60 declaration and the customer's identification details. The Income-tax Department aggregates the SFT data against the customer's PAN, generates the Annual Information Statement (AIS) that the assessee may view on the e-filing portal, and uses this for risk-assessment and selection for scrutiny. The functional purpose of the PAN regime is thus the joining of taxpayer information across the financial system — every customer-facing entity reports against the PAN, and the Income-tax Department reconciles the data centrally.

The inoperative PAN — the post-2023 operational consequences

Where an Indian resident assessee fails to link the PAN to the Aadhaar by the notified deadline, the PAN becomes "inoperative" under the CBDT notification machinery deriving authority from Section 139AA(2). The notifications issued in 2022 and 2023 set out the operational consequences. First, the assessee is not able to file a return of income — the e-filing portal rejects the submission with an "inoperative PAN" message. Second, refunds due to the assessee are withheld; interest on refund does not accrue for the period the PAN is inoperative. Third, the rate of tax deduction at source (TDS) on payments to the assessee is at the higher of the rates specified — Section 206AA of the Income-tax Act, 1961 applies a default TDS rate of twenty per cent (or higher) where the payee has not furnished a valid PAN. Fourth, the assessee is treated as not having furnished a PAN under Rule 114B for the purposes of specified transactions — banks decline to process transactions, sub-registrars decline to register conveyances, and capital-market intermediaries decline to permit trades.

The fifth consequence — the most significant for an ordinary holder — is that the inoperative PAN can be made operative again by intimating the Aadhaar number to the Income-tax Department after paying a fee specified by the CBDT (currently a thousand rupees). The PAN becomes operative within a few days of the successful intimation, and the holder may then resume regular income-tax operations. The PAN does not become permanently invalid; the consequence is reversible.

The post-2019 amendment to Section 139AA inserted the words "in such manner and from such date" so as to give the Central Government the operational flexibility to defer the invalidation. The CBDT has used this flexibility on multiple occasions, extending the deadline successively. The current operational position — as of the most recent CBDT notification — is to be checked on the Income-tax Department's portal before the holder relies on it.

The DPDP Act, 2023 — the data-protection overlay

The Digital Personal Data Protection Act, 2023 supplies the data-protection layer that overlays the PAN regime. Section 4 of the DPDP Act sets the consent foundation for processing of personal data; Section 5 prescribes the notice that must accompany the request for consent; Section 8 imposes obligations on the data fiduciary — the entity that determines the purpose and means of processing; Section 10 introduces the "Significant Data Fiduciary" category, with additional obligations. The Income-tax Department, as a State-led data fiduciary processing the demographic and financial information of every PAN holder, will operate within the framework of the DPDP Act once it is fully notified. The Section 285BA reporting entities — banks, post offices, capital-market intermediaries — are themselves data fiduciaries that will be required to comply with the consent and notice obligations of the DPDP Act in respect of the PAN-anchored data they report.

The exact interface between the DPDP Act and the Income-tax Act has not yet been worked out either in the statute or in any Rules notified to date. Section 17 of the DPDP Act carves out certain processing activities from the consent requirement — including processing necessary for any function under any law for the time being in force, the performance of which is in the public interest. The PAN-related processing by the Income-tax Department and the SFT reporting by reporting entities will, on a plain reading, fall within this exemption, but the boundary will need to be worked out in practice. The DPDP framework is, however, the constitutional and statutory inheritor of the privacy ruling in Puttaswamy I, (2017) 10 SCC 1.

What to watch — the boundary questions

Three questions remain genuinely open. The proportionality of the inoperative-PAN consequences — the constitutional validity of treating a PAN as inoperative on the failure to link Aadhaar was held to be within the proportionality envelope in Puttaswamy II, but the practical consequences (withholding of refunds, higher TDS, exclusion from banking and sub-registrar transactions) have been challenged on Article 19(1)(g) and Article 300A grounds in writ proceedings before the High Courts. The outcomes have been mixed; a definitive ruling on whether the cumulative consequences exceed the Article 19(6) reasonableness threshold is awaited.

The Money Bill question on the Aadhaar Act — the seven-judge Bench reference in Rojer Mathew v South Indian Bank, (2020) 6 SCC 1 is pending. A ruling against the Money Bill route taken in 2016 would unsettle the legislative-validity foundation of the Aadhaar Act, and by extension the validity of Section 139AA which is anchored on the Aadhaar Act's identification architecture.

The DPDP–Income-tax interface — the manner in which the DPDP Act's consent and significant-data-fiduciary regime will overlay the Section 285BA reporting regime is not yet clarified. The Section 17 exemption is likely to absorb the State-led processing, but the boundary with respect to the reporting entities (banks, post offices, capital-market intermediaries) is unsettled.

The operating lesson for the PAN holder is twofold. First, treat the PAN as an active identifier that requires periodic maintenance — link the Aadhaar promptly after issue, intimate any change in demographic information through the correction form, and never hold more than one PAN. Second, treat Rule 114B as the practical map of where a PAN must be quoted — and Form 60 as the residual fallback when the holder does not have one. The penalty under Section 272B is modest; the operational friction of an inoperative or duplicate PAN is not.