[Act No. 18 of 2016] [25th
March, 2016] An Act to
provide for, as a good governance, efficient, transparent, and targeted
delivery of subsidies, benefits and services, the expenditure for which is
incurred from the Consolidated Fund of India [1]
[or the Consolidated Fund of the State], to individuals residing in India
through assigning of unique identity numbers to such individuals and for
matters connected therewith or incidental thereto. Be it enacted by Parliament in the
Sixty-seventh Year of the Republic of India as follows:-- (1)
[2]
[This Act may be called the Aadhar and Other Laws (Amendment) Act, 2019]. (2)
It shall extend to the whole of India [3][****]
and save as otherwise provided in this Act, it shall also apply to any offence
or contravention thereunder committed outside India by any person. (3)
It
shall come into force on such date as the Central Government may, by
notification in the Official Gazette, appoint; and different dates may, be
appointed for different provisions of this Act and any reference in any such
provision to the commencement of this Act shall be construed as a reference to
the commencement of that provision. [4][In this Act, unless the context
otherwise requires,-- (a) [5]["Aadhaar number" means an
identification number issued to an individual under sub-section (3) of section
3, and includes any alternative virtual identity generated under sub-section
(4) of that section;] (aa)[6] ["Aadhaar ecosystem"
includes enrolling agencies, Registrars, requesting entities, offline
verification-seeking entities and any other entity or group of entities as may be
specified by regulations;] (b) "Aadhaar number
holder" means an individual who has been issued an Aadhaar number under
this Act; (ba) [7]["Adjudicating Officer" means
an Adjudicating Officer appointed under sub-section (1) of section 33B; (bb) "Appellate Tribunal"
means the Appellate Tribunal referred to in sub-section (1) of section 33C;] (c) "authentication"
means the process by which the Aadhaar number along with demographic
information or biometric information of an individual is submitted to the
Central Identities Data Repository for its verification and such Repository
verifies the correctness, or the lack thereof, on the basis of information
available with it; (d) [8]"authentication record" means
the record of the time of authentication and identity of the requesting entity
and the response provided by the Authority thereto; (e) "Authority"
means the Unique Identification Authority of India established under
sub-section (1) of section 11; (f) "benefit"
means any advantage, gift, reward, relief, or payment, in cash or kind, provided to an individual or a group
of individuals and includes such other benefits as may be notified by the
Central Government; (g)
"biometric
information" means photograph, finger print, Iris scan, or such other
biological attributes of an individual as may be specified by regulations; (h)
"Central
Identities Data Repository" means a centralised database in one or more
locations containing all Aadhaar numbers issued to Aadhaar number holders along
with the corresponding demographic information and biometric information of
such individuals and other information related thereto; (i)
"Chairperson"
means the Chairperson of the Authority appointed under section 12; (ia)[9] ["child" means a person who
has not completed eighteen years of age;] (j) "core biometric
information" means finger print, Iris scan, or such other biological
attribute of an individual as may be specified by regulations; (k) "demographic
information" includes information relating to the name, date of birth,
address and other relevant information of an individual, as may be specified by
regulations for the purpose of issuing an Aadhaar number, but shall not include
race, religion, caste, tribe, ethnicity, language, records of entitlement,
income or medical history; (l) "enrolling
agency" means an agency appointed by the Authority or a Registrar, as the
case may be, for collecting demographic and biometric information of
individuals under this Act; (m) "enrolment"
means the process, as may be specified by regulations, to collect demographic
and biometric information from individuals by the enrolling agencies for the
purpose of issuing Aadhaar numbers to such individuals under this Act; (n) "identity
information" in respect of an individual, includes his Aadhaar number, his
biometric information and his demographic information; (o) "Member"
includes the Chairperson and Member of the Authority appointed under section
12; (p) "notification" means a notification
published in the Official Gazette and the expression "notified" with
its cognate meanings and grammatical variations shall be construed accordingly; (pa)[10] ["offline verification"
means the process of verifying the identity of the Aadhaar number holder
without authentication, through such offline modes as may be specified by
regulations; (pb)"offline verification-seeking
entity" means any entity desirous of undertaking offline verification of
an Aadhaar number holder;] (q) "prescribed"
means prescribed by rules made by the Central Government under this Act; (r) "records of
entitlement" means records of benefits, subsidies or services provided to,
or availed by, any individual under any programme; (s) "Registrar"
means any entity authorised or recognised by the Authority for the purpose of
enrolling individuals under this Act; (t) "regulations"
means the regulations made by the Authority under this Act; (u) "requesting
entity" means an agency or person that submits the Aadhaar number, and
demographic information or biometric information, of an individual to the
Central Identities Data Repository for authentication; (v) "resident"
means an individual who has resided in India for a period or periods amounting
in all to one hundred and eighty-two days or more in the twelve months
immediately preceding the date of application for enrolment; (w) "service"
means any provision, facility, utility or any other assistance provided in any
form to an individual or a group of individuals and includes such other
services as may be notified by the Central Government; (x) "subsidy"
means any form of aid, support, grant, subvention, or appropriation, in cash or
kind, to an individual or a group of individuals and includes such other
subsidies as may be notified by the Central Government.] (1)
[11][Every resident shall
be entitled to obtain an Aadhaar number by submitting his demographic
information and biometric information by undergoing the process of enrolment:
Provided that the Central Government may, from time to time, notify such other
category of individuals who may be entitled to obtain an Aadhaar number. (2) The enrolling agency
shall, at the time of enrolment, inform the individual undergoing enrolment of
the following details in such manner as may be specified by regulations,
namely:— (a) the manner in which
the information shall be used; (b) the nature of
recipients with whom the information is intended to be shared during
authentication; and (c) the existence of a
right to access information, the procedure for making requests for such access,
and details of the person or department in-charge to whom such requests can be
made. (3)
On receipt of the demographic information and
biometric information under sub-section (1), the Authority shall, after
verifying the information, in such manner as may be specified by regulations,
issue an Aadhaar number to such individual.] (4)
[12] [The Aadhaar number
issued to an individual under sub-section (3) shall be a twelve-digit
identification number and any alternative virtual identity as an alternative to
the actual Aadhaar number of an individual that shall be generated by the
Authority in such manner as may be specified by regulations.] (1)
The
enrolling agency shall, at the time of enrolment of a child, seek the consent
of the parent or guardian of the child, and inform the parent or guardian, the
details specified under sub-section (2) of section 3. (2)
A
child who is an Aadhaar number holder may, within a period of six months of
attaining the eighteen years of age, make an application to the Authority for
cancellation of his Aadhaar number, in such manner as may be specified by
regulations and the Authority shall cancel his Aadhaar number. (3)
Notwithstanding
anything in section 7, a child shall not be denied any subsidy, benefit or
service under that section in case of failure to establish his identity by undergoing
authentication, or furnishing proof of possession of Aadhaar number, or in the
case of a child to whom no Aadhaar number has been assigned, producing an
application for enrolment.][13] (1)
[14] [An Aadhaar number, issued
to an individual shall not be re-assigned to any other individual. (2)
An
Aadhaar number shall be a random number and bear no relation to the attributes
or identity of the Aadhaar number holder. (3)
[15][Every Aadhaar number
holder to establish his identity, may voluntarily use his Aadhaar number in
physical or electronic form by way of authentication or offline verification,
or in such other form as may be notified, in such manner as may be specified by
regulations. Explanation.-- For the purposes of
this section, voluntary use of the Aadhaar number by way of authentication
means the use of such Aadhaar number only with the informed consent of the
Aadhaar number holder. (4)
An
entity may be allowed to perform authentication, if the Authority is satisfied
that the requesting entity is— (a)
compliant
with such standards of privacy and security as may be specified by regulations;
and (b)
(i)
permitted to offer authentication services under the provisions of any other
law made by Parliament; or (ii) seeking authentication for such
purpose, as the Central Government in consultation with the Authority, and in
the interest of State, may prescribe. (5)
The Authority may, by regulations, decide
whether a requesting entity shall be permitted the use of the actual Aadhaar
number during authentication or only an alternative virtual identity. (6)
Every
requesting entity to whom an authentication request is made by an Aadhaar
number holder under sub-section (3) shall inform to the Aadhaar number holder
of alternate and viable means of identification and shall not deny any service
to him for refusing to, or being unable to, undergo authentication. (7)
Notwithstanding
anything contained in the foregoing provisions, mandatory authentication of an
Aadhaar number holder for the provision of any service shall take place if such
authentication is required by a law made by Parliament.] [16] [The Authority shall
take special measures to issue Aadhaar number to women, children, senior
citizens, persons with disability, unskilled and unorganised workers, nomadic
tribes or to such other persons who do not have any permanent dwelling house
and such other categories of individuals as may be specified by regulations.] [17][The Authority may
require Aadhaar number holders to update their demographic information and
biometric information, from time to time, in such manner as may be specified by
regulations, so as to ensure continued accuracy of their information in the
Central Identities Data Repository.] [18][The Central
Government or, as the case may be, the State Government may, for the purpose of
establishing identity of an individual as a condition for receipt of a subsidy,
benefit or service for which the expenditure is incurred from, or the receipt
therefrom forms part of, the Consolidated Fund of India [19][or the Consolidated
Fund of State], require that such individual undergo authentication, or furnish
proof of possession of Aadhaar number or in the case of an individual to whom
no Aadhaar number has been assigned, such individual makes an application for
enrolment: Provided that if an Aadhaar number is
not assigned to an individual, the individual shall be
offered 4 alternate and viable means of identification for delivery
of the subsidy, benefit or service.] (1)
[20] [The Authority shall
perform authentication of the Aadhaar number of an Aadhaar number holder
submitted by any requesting entity, in relation to his biometric information or
demographic information, subject to such conditions and on payment of such fees
and in such manner as may be specified by regulations. (2)
A
requesting entity shall— (a)
unless
otherwise provided in this Act, obtain the consent of an individual [21][or in the case of a
child obtain the consent of his parent or guardian] before collecting his
identity information for the purposes of authentication in such manner as may
be specified by regulations; and (b)
ensure
that the identity information of an individual is only used for submission to
the Central Identities Data Repository for authentication. [22][Provided that the
requesting entity shall, in case of failure to authenticate due to illness,
injury or infirmity owing to old age or otherwise or any technical or other
reasons, provide such alternate and viable means of identification of the
individual, as may be specified by regulations.] (3)
A
requesting entity shall inform, in such manner as may be specified by
regulations, the individual submitting his identity information for
authentication [23][or in the case of a
child, his parent or guardian], the following details with respect to
authentication, namely:-- (a)
the
nature of information that may be shared upon authentication; (b)
the
uses to which the information received during authentication may be put by the
requesting entity; and (c)
alternatives
to submission of identity information to the requesting entity. (4)
The
Authority shall respond to an authentication query with a positive, negative or
any other appropriate response sharing such identity information excluding any
core biometric information.] (1)
Every
offline verification of an Aadhaar number holder shall be performed in
accordance with the provisions of this section. (2)
Every
offline verification-seeking entity shall,-- (a)
before
performing offline verification, obtain the consent of an individual, or in the
case of a child, his parent or guardian, in such manner as may be specified by
regulations; and (b)
ensure
that the demographic information or any other information collected from the
individual for offline verification is only used for the purpose of such
verification. (3)
An
offline verification-seeking entity shall inform the individual undergoing
offline verification, or in the case of a child, his parent or guardian, the
following details with respect to offline verification, in such manner as may
be specified by regulations, namely:-- (a)
the
nature of information that may be shared upon offline verification; (b)
the
uses to which the information received during offline verification may be put
by the offline verification-seeking entity; and (c)
alternatives
to submission of information requested for, if any. (4)
No
offline verification-seeking entity shall— (a)
subject
an Aadhaar number holder to authentication; (b)
collect,
use, or store an Aadhaar number or biometric information of any individual for
any purpose; (c)
take
any action contrary to any obligation on it as may be specified by
regulations.][24] [25][The Aadhaar number
or the authentication thereof shall not, by itself, confer any right of, or be
proof of, citizenship or domicile in respect of an Aadhaar number holder.] [26] [The Authority may
engage one or more entities to establish and maintain the Central Identities
Data Repository and to perform any other functions as may be specified by
regulations.] (1)
[27] [The Central
Government shall, by notification, establish an Authority to be known as the
Unique Identification Authority of India to be responsible for the processes of
enrolment and authentication and perform such other functions assigned to it
under this Act. (2)
The
Authority shall be a body corporate by the name aforesaid, having perpetual
succession and a common seal, with power, subject to the provisions of this
Act, to acquire, hold and dispose of property, both movable and immovable, and
to contract, and shall, by the said name, sue or be sued. (3)
The
head office of the Authority shall be in New Delhi. (4)
The
Authority may, with the prior approval of the Central Government, establish its
offices at other places in India.] [28] [The Authority shall
consist of a Chairperson, appointed on part-time or full-time basis, two
part-time Members, and the chief executive officer who shall be
Member-Secretary of the Authority, to be appointed by the Central Government.] [29] [The Chairperson and
Members of the Authority shall be persons of ability and integrity having
experience and knowledge of at least ten years in matters relating to
technology, governance, law, development, economics, finance, management,
public affairs or administration.] (1)
[30] [The Chairperson and
the Members appointed under this Act shall hold office for a term of three
years from the date on which they assume office and shall be eligible for
re-appointment: Provided that no person shall hold
office as the Chairperson or Member after he has attained the age of sixty-five
years. (2)
The
Chairperson and every Member shall, before entering office, make and subscribe
to, an oath of office and of secrecy, in such form and in such manner and
before such Authority as may be prescribed. (3)
Notwithstanding
anything contained in sub-section (1), the Chairperson or Member may— (a)
relinquish
his office, by giving in writing to the Central Government, a notice of not
less than thirty days; or (b)
be
removed from his office in accordance with the provisions of section 15. (4)
The
salaries and allowances payable to, and the other terms and conditions of
service of, the Chairperson and allowances or remuneration payable to part-time
Members shall be such as may be prescribed.] [31] [The Authority shall
consist of a Chairperson, appointed on part-time or full-time basis, two
part-time Members, and the chief executive officer who shall be
Member-Secretary of the Authority, to be appointed by the Central Government.] [32] [The Chairperson or
a Member on ceasing to hold office for any reason, shall not, without previous
approval of the Central Government,-- (a)
accept
any employment in, or be connected with the management of any organisation,
company or any other entity which has been associated with any work done or
contracted out by the Authority, whether directly or indirectly, during his
tenure as Chairperson or Member, as the case may be, for a period of three
years from the date on which he ceases to hold office: Provided that nothing contained in this
clause shall apply to any employment under the Central Government or a State
Government or local authority or in any statutory authority or any corporation
established by or under any Central, State or provincial Act or a Government
Company, as defined in clause (45) of section
2 of the Companies Act, 2013 (18 of
2013); (b)
act,
for or on behalf of any person or organisation in connection with any specific
proceeding or transaction or negotiation or a case to which the Authority is a
party and with respect to which the Chairperson or such Member had, before
cessation of office, acted for or provided advice to, the Authority; (c)
give
advice to any person using information which was obtained in his capacity as
the Chairperson or a Member and being unavailable to or not being able to be
made available to the public; or (d)
enter,
for a period of three years from his last day in office, into a contract of
service with, accept an appointment to a board of directors of, or accept an
offer of employment with, an entity with which he had direct and significant
official dealings during his term of office.] [33][The Chairperson
shall preside over the meetings of the Authority, and without prejudice to any
provision of this Act, exercise and discharge such other powers and functions
of the Authority as may be prescribed.] (1)
[34][There shall be a
chief executive officer of the Authority, not below the rank of Additional
Secretary to the Government of India, to be appointed by the Central
Government. (2)
The
chief executive officer shall be the legal representative of the Authority and
shall be responsible for— (a)
the
day-to-day administration of the Authority; (b)
implementing
the work programmes and decisions adopted by the Authority; (c)
drawing
up of proposal for the Authority's decisions and work programmes; (d)
the
preparation of the statement of revenue and expenditure and the execution of
the budget of the Authority; and (e)
performing
such other functions, or exercising such other powers, as may be specified by
regulations. (3)
Every
year, the chief executive officer shall submit to the Authority for approval— (a)
a
general report covering all the activities of the Authority in the previous
year; (b)
programmes
of work; (c)
the
annual accounts for the previous year; and (d)
the
budget for the coming year. (4)
The
chief executive officer shall have administrative control over the officers and
other employees of the Authority.] (1)
[35] [The Authority shall
meet at such times and places and shall observe such rules of procedure in
regard to the transaction of business at its meetings, including quorum at such
meetings, as may be specified by regulations. (2)
The Chairperson, or, if for any reason, he is
unable to attend a meeting of the Authority, the senior most Member shall
preside over the meetings of the Authority. (3)
All
questions which come up before any meeting of the Authority shall be decided by
a majority of votes by the Members present and voting and in the event of an
equality of votes, the Chairperson or in his absence the presiding Member shall
have a casting vote. (4)
All
decisions of the Authority shall be signed by the Chairperson or any other
Member or the Member-Secretary authorised by the Authority in this behalf. (5)
If
any Member, who is a director of a company and who as such director, has any
direct or indirect pecuniary interest in any manner coming up for consideration
at a meeting of the Authority, he shall, as soon as possible after relevant
circumstances have come to his knowledge, disclose the nature of his interest
at such meeting and such disclosure shall be recorded in the proceedings of the
Authority, and the Member shall not take part in any deliberation or decision
of the Authority with respect to that matter.] [36] [No act or proceeding
of the Authority shall be invalid merely by reason of-- (a)
any
vacancy in, or any defect in the constitution of, the Authority; (b)
any
defect in the appointment of a person as Chairperson or Member of the
Authority; or (c)
any
irregularity in the procedure of the Authority not affecting the merits of the
case.] (1)
The
Authority shall appoint such officers and employees as may be required for the
discharge of its functions under this Act. (2)
The
salaries and allowances payable to, and the other terms and conditions of
service of, the officers and employees of the Authority shall be such as may be
specified by regulations.] [38] [On and from the
establishment of the Authority-- (a)
all
the assets and liabilities of the Unique Identification Authority of India,
established vide notification of the Government of India in the Planning
Commission number A-43011/02/2009-Admin. I, dated the 28th January, 2009, shall
stand transferred to, and vested in, the Authority. Explanation.-- The assets of such
Unique Identification Authority of India shall be deemed to include all rights
and powers, and all properties, whether movable or immovable, including, in
particular, cash balances, deposits and all other interests and rights in, or
arising out of, such properties as may be in the possession of such Unique
Identification Authority of India and all books of account and other documents
relating to the same; and liabilities shall be deemed to include all debts,
liabilities and obligations of whatever kind; (b)
without
prejudice to the provisions of clause (a), all data and information collected
during enrolment, all details of authentication performed, debts, obligations
and liabilities incurred, all contracts entered into and all matters and things
engaged to be done by, with or for such Unique Identification Authority of
India immediately before that day, for or in connection with the purpose of the
said Unique Identification Authority of India, shall be deemed to have been
incurred, entered into or engaged to be done by, with or for, the Authority; (c)
all
sums of money due to the said Unique Identification Authority of India
immediately before that day shall be deemed to be due to the Authority; and (d)
all
suits and other legal proceedings instituted or which could have been
instituted by or against such Unique Identification Authority of India
immediately before that day may be continued or may be instituted by or against
the Authority.] (1)
[39][The Authority shall
develop the policy, procedure and systems for issuing Aadhaar numbers to
individuals and perform authentication thereof under this Act. (2)
Without
prejudice to sub-section (1), the powers and functions of the Authority, inter
alia, include— (a)
specifying,
by regulations, demographic information and biometric information required for
enrolment and the processes for collection and verification thereof; (b)
collecting
demographic information and biometric information from any individual seeking
an Aadhaar number in such manner as may be specified by regulations; (c)
appointing
of one or more entities to operate the Central Identities Data Repository; (d)
generating
and assigning Aadhaar numbers to individuals; (e)
performing
authentication of Aadhaar numbers; (f)
maintaining
and updating the information of individuals in the Central Identities Data
Repository in such manner as may be specified by regulations; (g)
omitting
and deactivating of an Aadhaar number and information relating thereto in such
manner as may be specified by regulations; (h)
specifying
the manner of use of Aadhaar numbers for the purposes of providing or availing
of various subsidies, benefits, services and other purposes for which Aadhaar
numbers may be used; (i)
specifying,
by regulations, the terms and conditions for appointment of Registrars,
enrolling agencies and service providers and revocation of appointments
thereof; (j)
establishing,
operating and maintaining of the Central Identities Data Repository; (k)
sharing,
in such manner as may be specified by regulations, the information of Aadhaar
number holders, subject to the provisions of this Act; (l)
calling
for information and records, conducting inspections, inquiries and audit of the
operations for the purposes of this Act of the Central Identities Data
Repository, Registrars, enrolling agencies and other agencies appointed under
this Act; (m)
specifying,
by regulations, various processes relating to data management, security
protocols and other technology safeguards under this Act; (n)
specifying,
by regulations, the conditions and procedures for issuance of new Aadhaar
number to existing Aadhaar number holder; (o)
levying
and collecting the fees or authorising the Registrars, enrolling agencies or
other service providers to collect such fees for the services provided by them
under this Act in such manner as may be specified by regulations; (p)
appointing
such committees as may be necessary to assist the Authority in discharge of its
functions for the purposes of this Act; (q)
promoting
research and development for advancement in biometrics and related areas,
including usage of Aadhaar numbers through appropriate mechanisms; (r)
evolving
of, and specifying, by regulations, policies and practices for Registrars,
enrolling agencies and other service providers; (s)
setting
up facilitation centres and grievance redressal mechanism for redressal of
grievances of individuals, Registrars, enrolling agencies and other service
providers; (t)
such
other powers and functions as may be prescribed. (3)
The
Authority may,-- (a)
enter
into Memorandum of Understanding or agreement, as the case may be, with the
Central Government or State Governments or Union territories or other agencies
for the purpose of performing any of the functions in relation to collecting,
storing, securing or processing of information or delivery of Aadhaar numbers
to individuals or performing authentication; (b)
by
notification, appoint such number of Registrars, engage and authorise such
agencies to collect, store, secure, process information or do authentication or
perform such other functions in relation thereto,as may be necessary for the
purposes of this Act. (4)
The
Authority may engage such consultants, advisors and other persons as may be
required for efficient discharge of its functions under this Act on such
allowances or remuneration and terms and conditions as may be specified by
contract.] (1)
The
Authority may for the discharge of its functions under this Act, or any rules
or regulations made there under, by order, issue such directions from time to
time to any entity in the Aadhaar ecosystem, as it may consider necessary. (2)
Every
direction issued under sub-section (1) shall be complied with by the entity in
the Aadhaar ecosystem to whom such direction is issued.][40] [41] [The Central
Government may, after due appropriation made by Parliament by law in this
behalf, make to the Authority, grants of such sums of money as the Central
Government may think fit for being utilised for the purposes of this Act.] (1)
[42]There shall be
constituted a Fund to be called the Unique Identification Authority of India
Fund and there shall be credited thereto— (a)
all
grants, fees and charges received by the Authority under this Act; and (b)
all
sums received by the Authority from such other sources as may be decided upon
by the Central Government. (2)
The Fund shall be applied for meeting— (a)
the
salaries and allowances payable to the Chairperson and members and
administrative expenses including the salaries, allowances and pension payable
to or in respect of officers and other employees of the Authority; and (b)
the
expenses on objects and for purposes authorised by this Act.][43] (1)
[44][The Authority shall
maintain proper accounts and other relevant records and prepare an annual
statement of accounts in such form as may be prescribed by the Central
Government in consultation with the Comptroller and Auditor-General of India. (2)
The
accounts of the Authority shall be audited annually by the Comptroller and
Auditor-General of India at such intervals as may be specified by him and any
expenditure incurred in connection with such audit shall be payable by the
Authority to the Comptroller and Auditor-General. (3)
The
Comptroller and Auditor-General of India and any person appointed by him in
connection with the audit the accounts of the Authority under this Act shall
have the same rights and privileges and authority in connection with such audit
as the Comptroller and Auditor-General generally has in connection with the
audit of Government accounts, and in particular, shall have the right to demand
production of books, accounts, connected vouchers and other documents and
papers, and to inspect any of the offices of the Authority. (4)
The
accounts of the Authority, as certified by the Comptroller and Auditor-General
of India or any other person appointed by him in this behalf, together with the
audit report thereon shall be forwarded annually to the Central Government by
the Authority and the Central Government shall cause the audit report to be
laid, as soon as may be after it is received, before each House of Parliament.] (1)
[45][The Authority shall
furnish to the Central Government at such time and in such form and manner as
may be prescribed or as the Central Government may direct, such returns and
statements and particulars in regard to any matter under the jurisdiction of
the Authority, as the Central Government may from time to time require. (2)
The
Authority shall prepare, once in every year, and in such form and manner and at
such time as may be prescribed, an annual report giving- (a)
a
description of all the activities of the Authority for the previous years; (b)
the
annual accounts for the previous year; and (c)
the
programmes of work for coming year. (3)
A
copy of the report received under sub-section (2) shall be laid by the Central
Government, as soon as may be after it is received, before each House of
Parliament.]][46] (1)
[47][The Authority shall
ensure the security of identity information and authentication records of
individuals. (2)
Subject
to the provisions of this Act, the Authority shall ensure confidentiality of
identity information and authentication records of individuals. (3)
The
Authority shall take all necessary measures to ensure that the information in
the possession or control of the Authority, including information stored in the
Central Identities Data Repository, is secured and protected against access,
use or disclosure not permitted under this Act or regulations made thereunder,
and against accidental or intentional destruction, loss or damage. (4)
Without
prejudice to sub-sections (1) and (2), the Authority shall— (a)
adopt
and implement appropriate technical and organisational security measures; (b)
ensure
that the agencies, consultants, advisors or other persons appointed or engaged
for performing any function of the Authority under this Act, have in place
appropriate technical and organisational security measures for the information;
and (c)
ensure
that the agreements or arrangements entered into with such agencies,
consultants, advisors or other persons, impose obligations equivalent to those
imposed on the Authority under this Act, and require such agencies,
consultants, advisors and other persons to act only on instructions from the
Authority. (5)
Notwithstanding anything contained in any
other law for the time being in force, and save as otherwise provided in this
Act, the Authority or any of its officers or other employees or any agency that
maintains the Central Identities Data Repository shall not, whether during his
service or thereafter, reveal any information stored in the Central Identities
Data Repository or authentication record to anyone: Provided that an Aadhaar number holder
may request the Authority to provide access to his identity information
excluding his core biometric information in such manner as may be specified by
regulations.] (1)
[48] [No core biometric
information, collected or created under this Act, shall be— (a)
shared
with anyone for any reason whatsoever; or (b)
used
for any purpose other than generation of Aadhaar numbers and authentication
under this Act. (2)
The
identity information, other than core biometric information, collected or created
under this Act may be shared only in accordance with the provisions of this Act
and in such manner as may be specified by regulations. (3)
[49][No identity
information available with a requesting entity or offline verification-seeking
entity shall be— (a)
used
for any purpose, other than the purposes informed in writing to the individual
at the time of submitting any information for authentication or offline
verification; or (b)
disclosed
for any purpose, other than purposes informed in writing to the individual at
the time of submitting any information for authentication or offline
verification: Provided that the purposes under
clauses (a) and (b) shall be in clear and precise language understandable to
the individual.] (4)
No
Aadhaar number [50][demographic
information or photograph] collected or created under this Act in respect of an
Aadhaar number holder shall be published, displayed or posted publicly, except
for the purposes as may be specified by regulations.] [51][The biometric
information collected and stored in electronic form, in accordance with this
Act and regulations made thereunder, shall be deemed to be "electronic
record" and "sensitive personal data or information", and the
provisions contained in the Information Technology Act, 2000 (21 of 2000) and
the rules made thereunder shall apply to such information, in addition to, and
to the extent not in derogation of the provisions of this Act. Explanation.-- For the purposes of this
section, the expressions-- (a)
"electronic
form" shall have the same meaning as assigned to it in clause (r) of
sub-section (1) of section
2 of the Information Technology
Act, 2000 (21 of 2000); (b)
"electronic
record" shall have the same meaning as assigned to it in clause (t) of
sub-section (1) of section
2 of the Information Technology
Act, 2000 (21 of 2000); (c)
"sensitive
personal data or information" shall have the same meaning as assigned to
it in clause (iii) of the Explanation to section
43A of the Information Technology
Act, 2000 (21 of 2000).] (1)
[52][In case any
demographic information of an Aadhaar number holder is found incorrect or
changes subsequently, the Aadhaar number holder shall request the Authority to
alter such demographic information in his record in the Central Identities Data
Repository in such manner as may be specified by regulations. (2)
In
case any biometric information of Aadhaar number holder is lost or changes
subsequently for any reason, the Aadhaar number holder shall request the
Authority to make necessary alteration in his record in the Central Identities
Data Repository in such manner as may be specified by regulations. (3)
On
receipt of any request under sub-section (1) or sub-section (2), the Authority
may, if it is satisfied, make such alteration as may be required in the record
relating to such Aadhaar number holder and intimate such alteration to the
concerned Aadhaar number holder. (4)
No identity information in the Central
Identities Data Repository shall be altered except in the manner provided in
this Act or regulations made in this behalf.] (1)
[53] [The Authority shall
maintain authentication records in such manner and for such period as may be
specified by regulations. (2)
Every
Aadhaar number holder shall be entitled to obtain his authentication record in
such manner as may be specified by regulations. (3)
The
Authority shall not, either by itself or through any entity under its control,
collect, keep or maintain any information about the purpose of authentication.] (1)
[54][Nothing contained in
sub-section (2) or sub-section (5) of section 28 or sub-section (2) of section
29 shall apply in respect of any disclosure of information, including identity
information or authentication records, made pursuant to an order of a court not
inferior to that of a [55][Judge of a High
Court]: Provided that no order by the court
under this sub-section shall be made without giving an opportunity of hearing
to the Authority [56][and the concerned
Aadhaar number holder]. [57][Provided further
that the core biometric information shall not be disclosed under this
sub-section.] (2)
[58] Nothing contained in
sub-section (2) or sub-section (5) of section 28 and clause (b) of sub-section
(1), sub-section (2) or sub-section (3) of section 29 shall apply in respect of
any disclosure of information, including identity information or authentication
records, made in the interest of national security in pursuance of a direction
of an officer not below the rank of [59][Secretary] to the
Government of India specially authorised in this behalf by an order of the Central
Government: Provided that every direction issued
under this sub-section, shall be reviewed by an Oversight Committee consisting
of the Cabinet Secretary and the Secretaries to the Government of India in the
Department of Legal Affairs and the Department of Electronics and Information
Technology, before it takes effect: Provided further that any direction
issued under this sub-section shall be valid for a period of three months from
the date of its issue, which may be extended for a further period of three
months after the review by the Oversight Committee.] [60][CHAPTER
VIA
Civil penalties] (1)
Where
an entity in the Aadhaar ecosystem fails to comply with the provision of this
Act, the rules or regulations made there under or directions issued by the
Authority under section 23A, or fails to furnish any information, document, or
return of report required by the Authority, such entity shall be liable to a civil
penalty which may extend to one crore rupees for each contravention and in case
of a continuing failure, with additional penalty which may extend to ten lakh
rupees for every day during which the failure continues after the first
contravention. (2)
The
amount of any penalty imposed under this section, if not paid, may be recovered
as if it were an arrear of land revenue.][61] (1)
For
the purposes of adjudication under section 33A and imposing a penalty there
under, the Authority shall appoint an officer of the Authority, who is not
below the rank of a Joint Secretary to the Government of India and possessing
such qualification and experience as may be prescribed, to be an Adjudicating
Officer for holding an inquiry in such manner as may be prescribed. (2)
No
inquiry under sub-section (1) shall be initiated except by a complaint made by
the Authority. (3)
While
holding an inquiry, the Adjudicating Officer shall— (a)
provide
the entity in the Aadhaar ecosystem against whom complaint is made, an
opportunity of being heard; (b)
have
the power to summon and enforce the attendance of any person acquainted with
the facts and circumstances of the case to give evidence or to produce any
document which, in the opinion of the Adjudicating Officer, may be useful for
or relevant to the subject matter of the inquiry. (4)
If
the Adjudicating Officer, on such inquiry, is satisfied that the entity in the
Aadhaar ecosystem has failed to comply with any provision of this Act or the
rules or regulations made there under or directions issued by the Authority
under section 23A, or has failed to furnish any information, document, or
return of report required by the Authority, the Adjudicating Officer may, by
order, impose such penalty under section 33A as he thinks fit.][62] (1)
The
Telecom Disputes Settlement and Appellate Tribunal established under section 14
of the Telecom Regulatory Authority of India Act, 1997 (24 of 1997), shall be
Appellate Tribunal for the purposes of hearing appeals against the decision of
the Adjudicating Officer under this Act. (2)
A
person or entity in the Aadhaar ecosystem aggrieved by an order of the
Adjudicating Officer under section 33B, may prefer an appeal to the Appellate
Tribunal within a period of forty-five days from the date of receipt of the
order appealed against, in such form and manner and accompanied with such fee
as may be prescribed: Provided that the
Appellate Tribunal may entertain an appeal after the expiry of the said period
of forty-five days if it is satisfied that there was sufficient cause for not
filing it within that period. (3)
On
receipt of an appeal under sub-section (2), the Appellate Tribunal may, after
giving the parties to the appeal an opportunity of being heard, pass such
orders thereon as it thinks fit, confirming, modifying or setting aside the
order appealed against. (4)
The
Appellate Tribunal shall send a copy of every order made by it to the parties
to the appeal and to the Adjudicating Officer. (5)
Any
appeal filed under sub-section (2) shall be dealt with by the Appellate
Tribunal as expeditiously as possible and every endeavour shall be made by it
to dispose of the appeal within six months from the date on which it is
presented to it. (6)
The
Appellate Tribunal may, for the purpose of deciding an appeal before it, call
for the records relevant to disposing of such appeal and make such orders as it
thinks fit.][63] The provisions of
sections 14-I to 14K (both inclusive), 16 and 17 of the Telecom Regulatory
Authority of India Act, 1997 (24 of 1997) shall, mutatis mutandis, apply to the
Appellate Tribunal in the discharge of its functions under this Act, as they
apply to it in the discharge of its functions under that Act.][64] (1)
Notwithstanding
anything contained in the Code of Civil Procedure, 1908 (5 of 1908) or in any
other law for the time being in force, an appeal shall lie against any order,
not being an interlocutory order, of the Appellate Tribunal to the Supreme
Court on any substantial question of law arising out of such order. (2)
No
appeal shall lie against any decision or order made by the Appellate Tribunal
which the parties have consented to. (3)
Every
appeal under this section shall be preferred within a period of forty-five days
from the date of the decision or order appealed against: Provided that the
Supreme Court may entertain an appeal after the expiry of the said period of
forty-five days if it is satisfied that there was sufficient cause for not
filing it within that period.][65] No civil court shall
have jurisdiction to entertain any suit or proceeding in respect of any matter
which an Adjudicating Officer appointed under this Act or the Appellate
Tribunal is empowered, by or under this Act to determine, and no injunction
shall be granted by any court or other authority in respect of any action taken
or to be taken in pursuance of any power conferred by or under this Act.][66] CHAPTER VII- OFFENCES AND PENALTIES [67][Whoever
impersonates or attempts to impersonate another person, whether dead or alive,
real or imaginary, by providing any false demographic information or biometric
information, shall be punishable with imprisonment for a term which may extend
to three years or with a fine which may extend to ten thousand rupees or with
both.] [68][Whoever,
with the intention of causing harm or mischief to an Aadhaar number holder, or
with the intention of appropriating the identity of an Aadhaar number holder
changes or attempts to change any demographic information or biometric
information of an Aadhaar number holder by impersonating or attempting to
impersonate another person, dead or alive, real or imaginary, shall be
punishable with imprisonment for a term which may extend to three years and
shall also be liable to a fine which may extend to ten thousand rupees.] [69][Whoever, not being
authorised to collect identity information under the provisions of this Act, by
words, conduct or demeanour pretends that he is authorised to do so, shall be
punishable with imprisonment for a term which may extend to three years or with
a fine which may extend to ten thousand rupees or, in the case of a company,
with a fine which may extend to one lakh rupees or with both.] [70][Whoever,
intentionally discloses, transmits, copies or otherwise disseminates any
identity information collected in the course of enrolment or authentication to
any person not authorised under this Act or regulations made thereunder or in
contravention of any agreement or arrangement entered into pursuant to the
provisions of this Act, shall be punishable with imprisonment for a term which
may extend to three years or with a fine which may extend to ten thousand
rupees or, in the case of a company, with a fine which may extend to one lakh
rupees or with both.] [71][Whoever, not being
authorised by the Authority, intentionally,-- (a)
accesses
or secures access to the Central Identities Data Repository; (b)
downloads,
copies or extracts any data from the Central Identities Data Repository or
stored in any removable storage medium; (c)
introduces
or causes to be introduced any virus or other computer contaminant in the
Central Identities Data Repository; (d)
damages
or causes to be damaged the data in the Central Identities Data Repository; (e)
disrupts
or causes disruption of the access to the Central Identities Data Repository; (f)
denies
or causes a denial of access to any person who is authorised to access the
Central Identities Data Repository; (g)
reveals
any information in contravention of sub-section (5) of section 28, or shares,
uses or displays information in contravention of section 29 or assists any
person in any of the aforementioned acts; (h)
destroys,
deletes or alters any information stored in any removable storage media or in
the Central Identities Data Repository or diminishes its value or utility or
affects it injuriously by any means; or (i)
steals,
conceals, destroys or alters or causes any person to steal, conceal, destroy or
alter any computer source code used by the Authority with an intention to cause
damage,shall be punishable with imprisonment for a term which may extend to
three years [72][ten
years] and shall also be liable to a fine which shall not be less than ten lakh
rupees. Explanation.-- For the purposes of this
section, the expressions "computer contaminant", "computer
virus" and "damage" shall have the meanings respectively
assigned to them in the Explanation to section 43 of the
Information Technology Act, 2000 (21 of 2000), and the expression
"computer source code" shall have the meaning assigned to it in the
Explanation to section 65 of the said
Act.] [73] [Whoever, not being
authorised by the Authority, uses or tampers with the data in the Central
Identities Data Repository or in any removable storage medium with the intent
of modifying information relating to Aadhaar number holder or discovering any
information thereof, shall be punishable with imprisonment for a term which may
extend to [74][ten
years] and shall also be liable to a fine which may extend to ten thousand
rupees.] Whoever,-- (a)
[75]being a requesting
entity, uses the identity information of an individual in contravention of sub-section
(2) of section 8; or (b)
being
an offline verification-seeking entity, uses the identity information of an
individual in contravention of sub-section (2) of section 8A, shall
be punishable with imprisonment which may extend to three years or with a fine
which may extend to ten thousand rupees or, in the case of a company, with a
fine which may extend to one lakh rupees or with both.][76] [77][Whoever, being an
enrolling agency or a requesting entity, fails to comply with the requirements
of sub-section (2) of section 3 or sub-section (3) of section 8, shall be4 [78][liable
to penalty which may extend to one lakh rupees, or in the case of a company,
with penalty which may extend to ten lakh rupees]. [79][Whoever commits an
offence under this Act or any rules or regulations made thereunder for which no
specific penalty is provided elsewhere than this section, shall be punishable
with imprisonment for a term which may extend to [80][three
years] or with a fine which may extend to twenty-five thousand rupees or, in
the case of a company, with a fine which may extend to one lakh rupees, or with
both.] (1) [81] [Where an offence
under this Act has been committed by a company, every person who at the time
the offence was committed was in charge of, and was responsible to, the company
for the conduct of the business of the company, as well as the company, shall
be deemed to be guilty of the offence and shall be liable to be proceeded
against and punished accordingly: Provided that nothing contained in this
sub-section shall render any such person liable to any punishment provided in
this Act if he proves that the offence was committed without his knowledge or
that he had exercised all due diligence to prevent the commission of such
offence. (2) Notwithstanding
anything contained in sub-section (1), where any offence under this Act has
been committed by a company and it is proved that the offence has been committed
with the consent or connivance of, or is attributable to, any neglect on the
part of any director, manager, secretary or other officer of the company, such
director, manager, secretary or other officer shall also be deemed to be guilty
of the offence and shall be liable to be proceeded against and punished
accordingly. Explanation.-- For the purposes of this
section-- (a)
"company"
means any body corporate and includes a firm or other association of
individuals; and (b)
"director",
in relation to a firm, means a partner in the firm.] (1)
[82] [Subject to the
provisions of sub-section (2), the provisions of this Act shall apply also to
any offence or contravention committed outside India by any person,
irrespective of his nationality. (2)
For
the purposes of sub-section (1), the provisions of this Act shall apply to any
offence or contravention committed outside India by any person, if the act or
conduct constituting the offence or contravention involves any data in the
Central Identities Data Repository.] [83] [Notwithstanding
anything contained in the Code of Criminal Procedure, 1973 (2 of 1974), a
police officer not below the rank of Inspector of Police shall investigate any
offence under this Act.] [84][No penalty imposed
under this Act shall prevent the imposition of any other penalty or punishment
under any other law for the time being in force.] (1) [85] [No court shall take
cognizance of any offence punishable under this Act, save on a complaint made
by the Authority or any officer or person authorised by it. [86] [Provided that the
court may, on a complaint made by an Aadhaar number holder or individual take
cognizance of any offence punishable under section 34 or 35 or 36 or 37 or 40
or section 41.] (2) No court inferior to
that of a Chief Metropolitan Magistrate or a Chief Judicial Magistrate shall
try any offence punishable under this Act.] (1)
[87][f, at any time, the
Central Government is of the opinion,-- (a)
that,
on account of circumstances beyond the control of the Authority, it is unable
to discharge the functions or perform the duties imposed on it by or under the
provisions of this Act; or (b)
that
the Authority has persistently defaulted in complying with any direction given
by the Central Government under this Act or in the discharge of the functions or
performance of the duties imposed on it by or under the provisions of this Act
and as a result of such default the financial position of the Authority or the
administration of the Authority has suffered; or (c)
that
a public emergency exists,the Central Government may, by notification,
supersede the Authority for such period, not exceeding six months, as may be
specified in the notification and appoint a person or persons as the President
may direct to exercise powers and discharge functions under this Act: Provided that before issuing any such
notification, the Central Government shall give a reasonable opportunity to the
Authority to make representations against the proposed supersession and shall
consider the representations, if any, of the Authority. (2)
Upon
the publication of a notification under sub-section (1), superseding the
Authority,-- (a)
the
Chairperson and other Members shall, as from the date of supersession, vacate
their offices as such; (b)
all
the powers, functions and duties which may, by or under the provisions of this
Act, be exercised or discharged by or on behalf of the Authority shall, until
the Authority is reconstituted under sub-section (3), be exercised and
discharged by the person or persons referred to in sub-section (1); and (c)
all
properties owned or controlled by the Authority shall, until the Authority is
reconstituted under sub-section (3), vest in the Central Government. (3)
On
or before the expiration of the period of supersession specified in the
notification issued under sub-section (1), the Central Government shall
reconstitute the Authority by a fresh appointment of its Chairperson and other
Members and in such case any person who had vacated his office under clause (a)
of sub-section (2) shall not be deemed to be disqualified for reappointment. (4)
The
Central Government shall cause a copy of the notification issued under
sub-section (1) and a full report of any action taken under this section and
the circumstances leading to such action to be laid before each House of
Parliament at the earliest.] [88] [The Chairperson,
Members, officers and other employees of the Authority shall be deemed, while
acting or purporting to act in pursuance of any of the provisions of this Act,
to be public servants within the meaning of section 21 of the Indian
Penal Code (45 of 1860).] (1) [89] [Without prejudice
to the foregoing provisions of this Act, the Authority shall, in exercise of
its powers or the performance of its functions under this Act be bound by such
directions on questions of policy, as the Central Government may give, in
writing to it, from time to time: Provided that the Authority shall, as
far as practicable, be given an opportunity to express its views before any
direction is given under this sub-section: Provided further that nothing in this
section shall empower the Central Government to issue directions pertaining to
technical or administrative matters undertaken by the Authority. (2) The decision of the
Central Government, whether a question is one of policy or not, shall be
final.] Notwithstanding anything contained in
the Income-tax Act, 1961 (43 of 1961) or any other enactment for the time being
in force relating to tax on income, profits or gains, the Authority shall not
be liable to pay income-tax or any other tax in respect of its income, profits
or gains.][90] [91] [The Authority may,
by general or special order in writing, delegate to any [92] [Member
or officer] of the Authority or any other person, subject to such conditions,
if any, as may be specified in the order, such of its powers and functions
under this Act (except the power under section 54) as it may deem necessary.] [93] [No suit,
prosecution or other legal proceeding shall lie against the Central Government
or the Authority or the Chairperson or any Member or any officer, or other
employees of the Authority for anything which is in good faith done or intended
to be done under this Act or the rule or regulation made thereunder.] (1)
[94][The Central
Government may, by notification, make rules to carry out the provisions of this
Act. (2)
In
particular, and without prejudice to the generality of the foregoing power,
such rules may provide for all or any of the following matters, namely:-- (a)
the
form and manner in which and the authority before whom the oath of office and
of secrecy is to be subscribed by the Chairperson and Members under sub-section
(2) of section 14; (aa)[95][
the purpose for which the requesting entity may be allowed by the Authority to
perform authentication under sub-clause (ii) of clause (b) of sub-section (4)
of section 4;] (b)
the salary and allowances payable to, and
other terms and conditions of service of, the Chairperson and the allowances or
remuneration payable to Members of the Authority under sub-section (4) of
section 14; (c)
the
other powers and functions of the Chairperson of the Authority under section
17; (d)
the
other powers and functions of the Authority under clause (t) of sub-section (2)
of section 23; (e)
the form of annual statement of accounts to be
prepared by Authority under sub-section (1) of section 26; (f)
the
form and the manner in which and the time within which returns and statements
and particulars are to be furnished under sub-section (1) of section 27; (g)
the
form and the manner and the time at which the Authority shall furnish annual
report under sub-section (2) of section 27; (ga)[96][the
qualification and experience of, and the manner of appointment of, the
Adjudicating Officer under sub-section (1) of section 33B; (gb) the form,
manner, and fee for an appeal to be filed under sub-section (2) of section
33C;] (h) any other matter which is required to be, or
may be, prescribed, or in respect of which provision is to be or may be made by
rules.] (1)
[97][The Authority may,
by notification, make regulations consistent with this Act and the rules made thereunder,
for carrying out the provisions of this Act. (2)
In
particular, and without prejudice to the generality of the foregoing power,
such regulations may provide for all or any of the following matters, namely:-- (a)
[98][the entities or
group of entities in the Aadhaar ecosystem under clause (aa), the biometric
information under clause (g) and the demographic information under clause (k),
the process of collecting demographic information and biometric information
from the individuals by enrolling agencies under clause (m), and the modes of
offline verification of Aadhaar number holder under clause (pa) of section 2;] (b)
the
manner of verifying the demographic information and biometric information for
issue of Aadhaar number under sub-section (3) of section 3; (ba) [99][the
manner of generating an alternative virtual identity under sub-section (4) of
section 3; (bb) the manner in which cancellation of an Aadhaar
number may be carried out under sub-section (2) of section 3A;] (c) the conditions for accepting an Aadhaar number
as proof of identity of the Aadhaar number holder under sub-section (3) of
section 4; (ca) [100][standards
of privacy and security to be complied with by the requesting entities under
sub-section (4) of section 4; (cb) the
classification of requesting entities under sub-section (5) of section 4;] (d)
the
other categories of individuals under section 5 for whom the Authority shall
take special measures for allotment of Aadhaar number; (e)
the manner of updating biometric information
and demographic information under section 6; (f)
the procedure for authentication of the
Aadhaar number under section 8; (fa) [101][the
alternate and viable means of identification of individual under the proviso to
clause (b) of sub-section (2) of section 8; (g)
the manner of obtaining consent under clause
(a) of sub-section (2), the manner of providing information to the individual
undergoing offline verification under sub-section (3), and the obligations of
offline verification-seeking entities under clause (c) of sub-section (4) of
section 8A;] (h)
the
other functions to be performed by the Central Identities Data Repository under
section 10; (i)
the
time and places of meetings of the Authority and the procedure for transaction
of business to be followed by it, including the quorum, under sub-section (1)
of section 19; (j)
the salary and allowances payable to, and
other terms and conditions of service of, the chief executive officer, officers
and other employees of the Authority under sub-section (2) of section 21; (k)
the demographic information and biometric
information under clause (a) and the manner of their collection under clause
(b) of sub-section (2) of section 23; (l)
the manner of maintaining and updating the
information of individuals in the Central Identities Data Repository under
clause (f) of sub-section (2) of section 23; (m)
the manner of omitting and deactivating an
Aadhaar number and information relating thereto under clause (g) of sub-section
(2) of section 23; (n)
the
manner of use of Aadhaar numbers for the purposes of providing or availing of
various subsidies, benefits, services and other purposes for which Aadhaar
numbers may be used under clause (h) of sub-section (2) of section 23; (o)
the
terms and conditions for appointment of Registrars, enrolling agencies and
other service providers and the revocation of appointments thereof under clause
(i) of sub-section (2) of section 23; (p)
the manner of sharing information of Aadhaar
number holder under clause (k) of sub-section (2) of section 23; (q)
various
processes relating to data management, security protocol and other technology
safeguards under clause (m) of sub-section (2) of section 23; (r)
the
procedure for issuance of new Aadhaar number to existing Aadhaar number holder
under clause (n) of sub-section (2) of section 23; (s)
manner of authorising Registrars, enrolling
agencies or other service providers to collect such fees for services provided
by them under clause (o) of sub-section (2) of section 23; (t)
policies and practices to be followed by the Registrar,
enrolling agencies and other service providers under clause (r) of sub-section
(2) of section 23; (u)
the manner of accessing the identity
information by the Aadhaar number holder under the proviso to sub-section (5)
of section 28; (v)
the manner of sharing the identity
information, other than core biometric information, collected or created under
this Act under sub-section (2) of section 29; (w)
the
manner of alteration of demographic information under sub-section (1) and
biometric information under sub-section (2) of section 31; (x)
the manner of and the time for maintaining the
request for authentication and the response thereon under sub-section (1), and
the manner of obtaining, by the Aadhaar number holder, the authentication
records under sub-section (2) of section 32; (y)
any
other matter which is required to be, or may be, specified, or in respect of
which provision is to be or may be made by regulations.] [102] [Every rule and
every regulation made under this Act shall be laid, as soon as may be after it
is made, before each House of Parliament, while it is in session, for a total
period of thirty days which may be comprised in one session or in two or more
successive sessions, and if, before the expiry of the session immediately
following the session or the successive sessions aforesaid, both Houses agree
in making any modification in the rule or regulation, or both the Houses agree
that the rule or regulation should not be made, the rule or regulation shall
thereafter have effect only in such modified form or be of no effect, as the
case may be; so, however, that any such modification or annulment shall be
without prejudice to the validity of anything previously done under that rule
or regulation.] [103][The provisions of
this Act shall be in addition to, and not in derogation of, any other law for
the time being in force.] [106] [***] (1) [107] [If any difficulty
arises in giving effect to the provisions of this Act, the Central Government
may, by order, published in the Official Gazette, make such provisions not
inconsistent with the provisions of this Act as may appear to be necessary for
removing the difficulty: Provided that no such order shall be
made under this section after the expiry of three years from the commencement
of this Act. (2) Every order made
under this section shall be laid, as soon as may be after it is made, before
each House of Parliament.] [108][Anything done or any
action taken by the Central Government under the Resolution of the Government
of India, Planning Commission bearing notification number
A-43011/02/2009-Admin. I, dated the 28th January, 2009, or by the Department of
Electronics and Information Technology under the Cabinet Secretariat
Notification bearing notification number S.O. 2492(E), dated the 12th
September, 2015, as the case may be, shall be deemed to have been validly done
or taken under this Act.] Statement of Objects and Reasons - AADHAAR (TARGETED
DELIVERY OF FINANCIAL AND OTHER SUBSIDIES, BENEFITS AND SERVICES) ACT, 2016 STATEMENT OF OBJECTS AND REASONS 1.
The
correct identification of targeted beneficiaries for delivery of various
subsidies, benefits, services, grants, wages and other social benefits schemes
which are funded from the Consolidated Fund of India has become a challenge for
the Government. The failure to establish identity of an individual has proved to
be a major hindrance for successful implementation of these programmes. This
has been a grave concern for certain categories of persons, such as women,
children, senior citizens, persons with disabilities, migrant unskilled and
unorganised workers, and nomadic tribes. In the absence of a credible system to
authenticate identity of beneficiaries, it is difficult to ensure that the
subsidies, benefits and services reach to intended beneficiaries. 2.
The
Unique Identification Authority of India was established by a resolution of the
Government of India, Planning Commission vide notification number A-43011/02/
2009-Admin.I, dated the 28th January, 2009. The object of the establishment of
the said Authority was primarily to lay down policies and to implement the
Unique Identification Scheme of the Government, by which residents of India
were to be provided unique identity number. This number, when authenticated
successfully, would serve as proof of identity and could be used for
identification of beneficiaries for transfer of benefits, subsidies, services
and other purposes. 3.
Over
the period of time, the use of Aadhaar number has been increased manifold. As a
result, commensurate measures relating to ensuring security of such information
need to be taken and offences pertaining to certain unlawful actions, created. 4.
In
view of this, and to provide for the effective, secure and accurate delivery of
benefits, subsidies and services from the Consolidated Fund of India to
targeted beneficiaries, and authenticating their identity through Aadhaar
numbers, it is felt that the processes of enrolment, authentication, security,
confidentiality and use of Aadhaar-related information be made statutory and to
facilitate the use of Aadhaar number for delivery of various benefits,
subsidies and services the expenditure of which is incurred from the
Consolidated Fund of India. 5.
The
Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and
Services) Bill, 2016, inter alia, seeks to provide for- (a)
issue
of Aadhaar numbers to individuals on providing his demographic and biometric
information to the Unique Identification Authority of India; (b)
requiring
Aadhaar numbers for identifying an individual for delivery of benefits,
subsidies, and services the expenditure is incurred from or the receipt
therefrom forms part of the Consolidated Fund of India; (c)
authentication
of the Aadhaar number of an Aadhaar number holder in relation to his
demographic and biometric information; (d)
establishment
of the Unique Identification Authority of India consisting of a Chairperson,
two Members and a Member-Secretary to perform functions in pursuance of the
objectives above; (e)
maintenance
and updating the information of individuals in the Central Identities Data
Repository in such manner as may be specified by regulations; (f)
measures
pertaining to security, privacy and confidentiality of information in
possession or control of the Authority including information stored in the
Central Identities Data Repository; and (g)
offences
and penalties for contravention of relevant statutory provisions. 6.
The
notes on clauses explain in detail the various provisions contained in the
Bill. 7.
The Bill seeks to achieve the above
objectives. [1] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [2] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [3] Omitted
by Jammu And Kashmir Reorganisation Act, 2019, w.e.f. 31.10.2019 the
previous text was:- "except the
State of Jammu and Kashmir" [4] W.e.f. 12.09.2016 vide Notification No.
SO2927(E) dated 12.09.2016. [5] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "(a)
"Aadhaar number" means an identification number issued to an
individual under sub-section (3) of section 3;" [6] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [7] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [8] This Section has
been scrapped by Justice K.S. Puttaswamy (retd.) & anr. V. Union of india
and Others (MANU-SC-1054-2018). [9] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [10] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [11] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [12] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [13] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [14] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [15] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019 for the
following:- "(3) An Aadhaar
number, in physical or electronic form subject to authentication and other
conditions, as may be specified by regulations, may be accepted as proof of
identity of the Aadhaar number holder for any purpose. Explanation.-- For
the purposes of this sub-section, the expression "electronic form"
shall have the same meaning as assigned to it in clause (r) of sub-section (1)
of section 2 of the Information Technology Act, 2000 (21 of
2000).]" [16] . W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [17] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [18] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [19] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [20] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [21] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [22] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [23] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [24] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [25] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [26] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [27] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [28] W.e.f. from 12.07.2016
vide Notification No. SO2357(E) dated 12.07.2016. [29] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [30] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [31] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [32] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [33] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [34] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [35] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [36] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [37] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "(1) The
Authority may, with the approval of the Central Government, determine the
number, nature and categories of other officers and employees required by the
Authority in the discharge of its functions. (2) The salaries and
allowances payable to, and the other terms and conditions of service of, the
chief executive officer and other officers and other employees of the Authority
shall be such as may be specified by regulations with the approval of the
Central Government." [38] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [39] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [40] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [41] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [42] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [43] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "25. Other fees
and revenues [The fees or revenue collected by the
Authority shall be credited to the Consolidated Fund of India.]" [44] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [45] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [46] This Section has
been scrapped by Justice K.S. Puttaswamy (retd.) & anr. V. Union of india
and Others (MANU-SC-1054-2018). [47] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [48] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [49] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "(3) No identity
information available with a requesting entity shall be-- (a) used for any
purpose, other than that specified to the individual at the time of submitting
any identity information for authentication; or (b) disclosed
further, except with the prior consent of the individual to whom such
information relates." [50] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "or core
biometric information" [51] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [52] . W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [53] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [54] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [55] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "District
Judge" [56] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [57] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [58] This Section has
been scrapped by Justice K.S. Puttaswamy (retd.) & anr. V. Union of india
and Others (MANU-SC-1054-2018). [59] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "Joint
Secretary" [60] Inserted
by Aadhaar And Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [61] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [62] Inserted by Aadhaar
and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [63] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [64] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [65] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [66] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [67] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [68] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [69] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [70] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [71] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [72] Substituted by Aadhaar
and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019 for the
following:- "three
years" [73] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [74] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "three
years" [75] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [76] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "40. Penalty for
unauthorised use by requesting entity " [Whoever,
being a requesting entity, uses the identity information of an individual in
contravention of sub-section (3) of section 8, shall be punishable with
imprisonment which may extend to three years or with a fine which may extend to
ten thousand rupees or, in the case of a company, with a fine which may extend
to one lakh rupees or with both.]" [77] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [78] Subs. by Act 18 of
2023, s. 2 and Schedule, for certain words "punishable with imprisonment
which may extend to one year or with a fine which may extend to ten thousand
rupees or, in the case of a company, with a fine which may extend to one lakh
rupees or with both" (w.e.f. 30-11-2023)] [79] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [80] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019 for the following:- "one year" [81] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [82] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [83] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [84] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [85] W.e.f. 12.09.2016
vide Notification No. SO2927(E) dated 12.09.2016. [86] Inserted by Aadhaar
and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [87] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [88] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [89] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [90] Inserted by
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [91] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [92] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019 for
the following:- "Member,
officer" [93] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [94] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [95] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [96] Inserted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019. [97] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [98] Substituted
by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f. 25.07.2019 for
the following:- "(a) the
biometric information under clause (g) and the demographic information under
clause (k), and the process of collecting demographic information and biometric
information from the individuals by enrolling agencies under clause (m) of
section 2;" [99]
Inserted by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019. [100]
Inserted by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019. [101]
Inserted by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019. [102] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [103] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [104] This Section has
been scrapped by Justice K.S. Puttaswamy (retd.) & anr. V. Union of india
and Others (MANU-SC-1054-2018). [105] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [106]
Omitted by Aadhaar and Other Laws (Amendment) Act, 2019, w.e.f.
25.07.2019, the previous text was:- " [Nothing
contained in this Act shall prevent the use of Aadhaar number for establishing
the identity of an individual for any purpose, whether by the State or any body
corporate or person, pursuant to any law, for the time being in force, or any
contract to this effect: Provided that the use
of Aadhaar number under this section shall be subject to the procedure and
obligations under section 8 and Chapter VI.]" [107] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016. [108] W.e.f. from
12.07.2016 vide Notification No. SO2357(E) dated 12.07.2016.AADHAAR
(TARGETED DELIVERY OF FINANCIAL AND OTHER SUBSIDIES, BENEFITS AND SERVICES)
ACT, 2016 (Amended upto 2023)
PREAMBLE