Taxpayer Advisory: Upcoming Security Enhancements on GST Portal

The Goods and Services Tax Network (GSTN) is determined to be continuously enhanced to strengthen data security and improve transparency for taxpayers.

In this effort, the following improvement will now be introduced, wherein there will be transparency and control by the taxpayers who use the GST system through Application Suvidha Providers (ASP). The GST system has authorized Application Programming Interface (API) channel partners referred to as GST Suvidha Providers (GSP), which use and access ASP. A GSP is supposed to act as a bridge of API connection between the GST system and the ASP.
All these advancements should give taxpayers more visibility and control over the way their data is accessed and used by third-party service providers who access the GST APIs.

GST Suvidha Provider (GSP)

GST Suvidha Provider is known as GSP. A GSP allows a GST taxpayer to comply with all the procedural requirements of the GST law using the web platforms of the GSP.  A GSP offers new ways or techniques of a vibrant interactive medium through which taxpayers can utilize services provided by the GST portal that include registration, invoicing, and the completion of GST return filing.

Real-Time Notifications of OTP-Based Consent Access

A new notification system will be launched to inform taxpayers every time an ASP successfully obtains OTP-based consent to access their GST data via APIs.

Once the consent is granted by the taxpayer through OTP, the authorized signatory of the taxpayer will receive an email and/or SMS alert. This will serve as immediate confirmation that data access has occurred using OTP validation.

The following will be valuable information contained in these notifications

• Name of the Application Suvidha Provider (ASP)
• Name of the related GST Suvidha Provider (GSP) with which the API was authorized
• Date and time of the OTP consent given
  Validity Period of the consent

This notification mechanism aims to keep taxpayers fully informed about third-party access to their GST data.

Enhanced Dashboard Access for ASP/GSP Authorization Control

Further enhancements to the GST portal will enable taxpayers to

• See a full list of the OTP-based accesses that are current and historical, of a list that was acquired by ASPs with the assistance of GSPs. 
• In the dashboard itself, remove consent already given to an ASP.

This new feature will be available after the taxpayer has logged in to his/her account in the GST portal. This feature aims to provide a higher degree of visibility and more control of ways and means with regard to access privileges issued to ASPs.  The objective is to improve oversight and allow taxpayers to manage third-party access independently and securely.

Availability Timeline

The specific timings in which these features will be active on the GST portal are notified separately through detailed advisories issued by GSTN.

The taxpayers will be advised to keep in touch with such announcements and continuously monitor the communication at the official GST portal.

The Big Picture

Such improvements represent a significant step toward enhancing the security of the GST ecosystem architecture. GSTN also ensures that its operations revolve around trust and transparency by preemptively informing taxpayers and providing complete visibility and control in the use of third-party access.

The new updates of the portal will allow taxpayers to be cautious regarding any unauthorized access to their information and act as soon as the new capabilities go live.

The taxpayers could seek any additional support or explanation from the GST help desk, or relevant information could be sought at

Sources of information: https://www.gst.gov.in/

News and Updates - https://services.gst.gov.in/services/advisory/advisoryandreleases