Section 15(3)(b) in The Aadhaar (Authentication) Regulations, 2016
(b)shall comply with all obligations relating to personal information of the Aadhaar number holder, data security and other relevant responsibilities that are applicable to requesting entities.