Section 8A(4) in The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016
(4)No offline verification-seeking entity shall-(a)subject an Aadhaar number holder to authentication;(b)collect, use, or store an Aadhaar number or biometric information of any individual for any purpose;(c)take any action contrary to any obligation on it as may be specified by regulations.]
