Section 22(4) in The Aadhaar (Authentication) Regulations, 2016
(4)Requesting Entities and Authentication Service Agencies shall adhere to all regulations, information security policies, processes, standards, specifications and guidelines issued by the Authority from time to time.
