Section 16 in AADHAAR (AUTHENTICATION AND OFFLINE VERIFICATION) REGULATIONS, 2021
16. Use of e-KYC authentication facility.—
(1)A KUA may use the e-KYC authentication facility provided by the Authority for obtaining the e-KYC dataof the Aadhaar number holder for its own purposes.(2)A KUA shall obtain specific permission from the Authority by submitting an application for sharing ofe-KYC data with Sub-KUA and such data may be shared in encrypted form as per the guidelines issued bythe Authority from time to time, with specific consent of Aadhaar number holder.(3)The Sub-KUA with whom the KUA has shared the e-KYC data of the Aadhaar number holder shall notshare it further with any other entity or agency.(4)The Aadhaar number holder may, at any time, revoke consent given to a KUA/Sub-KUA for storing hise-KYC data, and upon such revocation, the KUA/Sub-KUA shall delete the e-KYC data in a verifiablemanner and provide an acknowledgement of the same to the Aadhaar number holder.(5)In addition to the restriction on further sharing contained in sub-regulation (3), all other obligations relatingto the personal information of the Aadhaar number holder, data security and other relevant responsibilitiesapplicable to requesting entities, shall also apply to the Sub-KUA with whom e-KYC data has been shared inaccordance with this regulation 16.(6)The KUA shall maintain auditable logs of all such transactions where e-KYC data has been shared with Sub-KUAs, for a period specified by the Authority.
