Section 14(1)(m) in AADHAAR (AUTHENTICATION AND OFFLINE VERIFICATION) REGULATIONS, 2021
(m)shall be responsible for the authentication operations and results, even if it sub-contracts parts of itsoperations to third parties. The requesting entity is also responsible for ensuring that theauthentication related operations of such third party entities comply with Authority standards andspecifications and that they are regularly audited by approved independent audit agencies;(ma)may agree upon the authentication charges for providing authentication services to its customer, withsuch customer, and the Authority shall have no say in this respect, for the time being; however, theAuthority’s right to prescribe a different mechanism in this respect in the future shall be deemed tohave been reserved;(mb)Aadhaar numbers collected through physical forms or photocopies of Aadhaar letters shall bemasked by the requesting entity by redacting the first 8 digits of the Aadhaar number before storingthe physical copies.