Section 17(1)(b) in The Aadhaar (Authentication) Regulations, 2016
(b)the core biometric information collected is not transmitted over a network without creation of encrypted PID block which can then be transmitted in accordance with specifications and processes laid down by the Authority.