(1) No core biometric information, collected or created under this Act, shall be--
(a) shared with anyone for any reason whatsoever; or
(b) used for any purpose other than generation of Aadhaar numbers and authentication under this Act.
(2) The identity information, other than core biometric information, collected or created under this Act may be shared only in accordance with the provisions of this Act and in such manner as may be specified by regulations.
1[(3) No identity information available with a requesting entity or offline verification-seeking entity shall be--
(a) used for any purpose, other than the purposes informed in writing to the individual at the time of submitting any information for authentication or offline verification; or
(b) disclosed for any purpose, other than purposes informed in writing to the individual at the time of submitting any information for authentication or offline verification:
Provided that the purposes under clauses (a) and (b) shall be in clear and precise language understandable to the individual.]
(4) No Aadhaar number 2[, demographic information or photograph] collected or created under this Act in respect of an Aadhaar number holder shall be published, displayed or posted publicly, except for the purposes as may be specified by regulations.
1Subs. by Act 14 of 2019, s. 13, for sub-section (3) (w.e.f. 25-7-2019).
2Subs. by Act 14 of 2019, s. 13, for "or core biometric information" (w.e.f. 25-7-2019).