(1) The Authority shall maintain authentication records in such manner and for such period as may be specified by regulations.
(2) Every Aadhaar number holder shall be entitled to obtain his authentication record in such manner as may be specified by regulations.
(3) The Authority shall not, either by itself or through any entity under its control, collect, keep or maintain any information about the purpose of authentication.