Section 17(1)(g) in The Aadhaar (Authentication) Regulations, 2016
(g)all relevant laws and regulations in relation to data storage and data protection relating to the Aadhaarbased identity information in their systems, that of their agents (if applicable) and with authentication devices, are complied with.