Section 28(4) in The Aadhaar (Authentication) Regulations, 2016
(4)The authentication records and e-KYC data shall not be shared with any person or entity:(a)other than with the Aadhaar number holder to whom the records or e-KYC data relate in accordance with the verification procedure specified. Aadhaar number holder may share their digitally signed authentication records and e-KYC data with other entities which shall not further share with any other agencies without obtaining consent of the Aadhaar holder every time before such sharing.(b)except in accordance with the Act.
