Section 14A(1) in AADHAAR (AUTHENTICATION AND OFFLINE VERIFICATION) REGULATIONS, 2021
(1)An OVSE shall have the following obligations:—(a)ensure compliance of Aadhaar Act and Regulations framed thereunder as well as relevantpolicies, manuals, procedures, specifications, standards, and directions issued by the Authority;(b)shall not collect, use or store Aadhaar number or biometric information of any individual forany purpose or share offline Aadhaar data with any other entity except in accordance with theAct and Regulations framed thereunder;(c)in case of any investigation involving Aadhaar data related fraud(s) or dispute(s), it shall extendfull cooperation to the Authority, or any agency appointed or authorised by it or any otherauthorised investigation agency, including, but not limited to, providing access to theirpremises, records, personnel and any other relevant resources or information as well to assistthe Authority in disseminating information to the general public about any Aadhaar data relatedfraud to enable Aadhaar number holders to evaluate whether they were victims of the fraud andtake remedial action;(d)shall inform the Authority, without undue delay and in no case beyond 72 hours after havingknowledge of misuse of any information or systems related to the Aadhaar framework or anycompromise of Aadhaar related information. If the OVSE is a victim of fraud or identifies afraud pattern through its fraud analytics system related to Offline Verification, it shall share allnecessary details of the fraud with the Authority as well as to affected Aadhaar number holderswithout undue delay;(e)shall be responsible for the Offline Verification operations and results, even if it sub-contractsparts of its operations to third parties. Further, the OVSE is responsible for ensuring that theOffline Verification related operations of such third-party entities comply with the Authoritystandards and specifications;(f)extend full co-operation to the Authority for any mass awareness programmes that theAuthority may undertake to sensitize Aadhaar number holders about the nature of data beingused in offline verification, the scope of misuse as well as steps to protect against such misuseor fraud.
