Section 29 in The Aadhaar (Targeted Delivery of Financial and Other Subsidies Benefits and Services) Act 2016

Title: Restriction on sharing information

Description: (1) No core biometric information, collected or created under this Act, shall be-- (a) shared with anyone for any reason whatsoever; or (b) used for any purpose other than generation of Aadhaar numbers and authentication under this Act. (2) The identity information, other than core biometric information, collected or created under this Act may be shared only in accordance with the provisions of this Act and in such manner as may be specified by regulations. 1[(3) No identity information available with a requesting entity or offline verification-seeking entity shall be-- (a) used for any purpose, other than the purposes informed in writing to the individual at the time of submitting any information for authentication or offline verification; or (b) disclosed for any purpose, other than purposes informed in writing to the individual at the time of submitting any information for authentication or offline verification: Provided that the purposes under clauses (a) and (b) shall be in clear and precise language understandable to the individual.] (4) No Aadhaar number 2[, demographic information or photograph] collected or created under this Act in respect of an Aadhaar number holder shall be published, displayed or posted publicly, except for the purposes as may be specified by regulations. 1. Subs. by Act 14 of 2019, s. 13, for sub-section (3) (w.e.f. 25-7-2019). 2. Subs. by Act 14 of 2019, s. 13, for "or core biometric information" (w.e.f. 25-7-2019).

Title: Biometric information deemed to be sensitive personal information

Description: The biometric information collected and stored in electronic form, in accordance with this Act and regulations made thereunder, shall be deemed to be "electronic record" and "sensitive personal data or information", and the provisions contained in the Information Technology Act, 2000 (21 of 2000) and the rules made thereunder shall apply to such information, in addition to, and to the extent not in derogation of the provisions of this Act. Explanation. — For the purposes of this section, the expressions— (a) "electronic form" shall have the same meaning as assigned to it in clause (r) of sub-section (1) of section 2 of the Information Technology Act, 2000 (21 of 2000); (b) "electronic record" shall have the same meaning as assigned to it in clause (t) of sub-section (1) of section 2 of the Information Technology Act, 2000 (21 of 2000); (c) "sensitive personal data or information" shall have the same meaning as assigned to it in clause (iii) of the Explanation to section 43A of the Information Technology Act, 2000 (21 of 2000).

Title: Alteration of demographic information or biometric information

Description: (1) In case any demographic information of an Aadhaar number holder is found incorrect or changes subsequently, the Aadhaar number holder shall request the Authority to alter such demographic information in his record in the Central Identities Data Repository in such manner as may be specified by regulations. (2) In case any biometric information of Aadhaar number holder is lost or changes subsequently for any reason, the Aadhaar number holder shall request the Authority to make necessary alteration in his record in the Central Identities Data Repository in such manner as may be specified by regulations. (3) On receipt of any request under sub-section (1) or sub-section (2), the Authority may, if it is satisfied, make such alteration as may be required in the record relating to such Aadhaar number holder and intimate such alteration to the concerned Aadhaar number holder. (4) No identity information in the Central Identities Data Repository shall be altered except in the manner provided in this Act or regulations made in this behalf.

Title: Access to own information and records of requests for authentication

Description: (1) The Authority shall maintain authentication records in such manner and for such period as may be specified by regulations. (2) Every Aadhaar number holder shall be entitled to obtain his authentication record in such manner as may be specified by regulations. (3) The Authority shall not, either by itself or through any entity under its control, collect, keep or maintain any information about the purpose of authentication.

Title: Disclosure of information in certain cases

Description: (1) Nothing contained in sub-section (2) or sub-section (5) of section 28 or sub-section (2) of section 29 shall apply in respect of any disclosure of information, including identity information or authentication records, made pursuant to an order of a court not inferior to that of a 1[Judge of a High Court]: Provided that no order by the court under this sub-section shall be made without giving an opportunity of hearing to the Authority 2[and the concerned Aadhaar number holder]. 2[Provided further that the core biometric information shall not be disclosed under this sub-section.] (2) Nothing contained in sub-section (2) or sub-section (5) of section 28 and clause (b) of sub-section (1), sub-section (2) or sub-section (3) of section 29 shall apply in respect of any disclosure of information, including identity information or authentication records, made in the interest of national security in pursuance of a direction of an officer not below the rank of 3[Secretary] to the Government of India specially authorised in this behalf by an order of the Central Government: Provided that every direction issued under this sub-section, shall be reviewed by an Oversight Committee consisting of the Cabinet Secretary and the Secretaries to the Government of India in the Department of Legal Affairs and the Department of Electronics and Information Technology, before it takes effect: Provided further that any direction issued under this sub-section shall be valid for a period of three months from the date of its issue, which may be extended for a further period of three months after the review by the Oversight Committee. 1. Subs. by s. 14, ibid., for “District Judge” (w.e.f. 25-7-2019). 2. Ins. by s. 14, ibid. (w.e.f. 25-7-2019).. 3. Subs. by Act 14 of 2019, s. 14, for "Joint Secretary" (w.e.f. 25-7-2019).