Section 28(4)(b) in The Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016
(b)ensure that the agencies, consultants, advisors or other persons appointed or engaged for performing any function of the Authority under this Act, have in place appropriate technical and organisational security measures for the information; and