Aadhaar (Authentication and Offline Verification) Regulations, 2021 · III — Appointment Of Requesting Entities And
Regulation 12 Appointment of 22[requesting entity and Authentication Service Agency]
(1) An agency or other person seeking appointment as a requesting entity for use of an Authentication facility shall apply to the Authority for appointment, in such form as the Authority may provide upon request made to it by such agency or person:
Provided that such agency or person, on appointment as requesting entity, shall perform authentication only for such purpose as is—
(a) allowed under sub-section (4) or required under any law as referred to in sub- section (7) of section 4 of the Act; or
(b) required by the Central Government or a State Government under section 7 of the Act. (1A) Requesting entity and ASA shall meet technical and security criteria as specified by the Authority from time to time. [(2) An entity seeking appointment as an ASA for use of an Authentication facility shall apply to the Authority for appointment, in such form as the Authority may provide upon request made to it by such entity. (2A) The entity seeking appointment as ASA shall fulfil the criteria specified in Schedule A.]
(3) The Authority may require the applicant to furnish further information or clarifications, regarding matters relevant to the activity of such a requesting entity or Authentication Service Agencies, as the case may be, which may otherwise be considered necessary by the Authority, to consider and dispose of the application.
(4) The applicant shall furnish such information and clarification to the satisfaction of the Authority, within the time as may be specified in this regard by the Authority.
(5) While considering the application, the information furnished by the applicant and its eligibility, the Authority may verify the information through physical verification of documents, infrastructure, and technological support which the applicant is required to have.
(6) After verification of the application, documents, information furnished by the applicant and its eligibility, the Authority may, if it is satisfied that the general character of management and the financial condition of the applicant are sound for securing the interests of privacy and security of information of the general public,— a. approve the application for requesting entity or Authentication Service Agency, as the case may be; and b. enter into appropriate agreements with the entity or agency incorporating the terms and conditions for use by requesting entities of the Authority's authentication facility, or provision of services by ASAs, including damages and disincentives for non- performance of obligations.
(7) The Authority may from time to time, determine the fees and charges payable by entities during their appointment, including application fees, annual subscription fees and fees for individual authentication transactions.
(8) The Authority may from time to time, determine requesting entities which may be allowed to store Aadhaar number or masked Aadhaar number.
(9) The Authority may from time to time, determine the data fields to be provided as part of e-KYC response to particular requesting entities.
(10) The Authority may from time to time, determine if requesting entities will be allowed to perform authentication using Aadhaar number or Virtual ID or UID Token or ANCS or any other identifier.
Source: Wayback Machine snapshot of UIDAI's original publication.
(1) Agencies seeking to become requesting entities to use the authentication facility provided by the Authority shall apply for appointment as requesting entities in accordance with the procedure as may be specified by the Authority for this purpose from time to time. Only those entities that fulfill the criteria laid down in Schedule A are eligible to apply. The Authority may by order, amend Schedule A from time to time so as to modify the eligibility criteria (1A) Requesting entity and ASA shall meet technical and security criteria as specified by the Authority from time to time.
(2) Entities seeking appointment as Authentication Service Agencies shall apply for appointment to the Authority in accordance with the procedure as may be specified by the Authority for this purpose. Only those entities that fulfill the criteria laid down in Schedule B are eligible to apply. The Authority may by order, amend Schedule B from time to time so as to modify the eligibility criteria.
(3) The Authority may require the applicant to furnish further information or clarifications, regarding matters relevant to the activity of such a requesting entity or Authentication Service Agencies, as the case may be, which may otherwise be considered necessary by the Authority, to consider and dispose of the application.
(4) The applicant shall furnish such information and clarification to the satisfaction of the Authority, within the time as may be specified in this regard by the Authority.
(5) While considering the application, the information furnished by the applicant and its eligibility, the Authority may verify the information through physical verification of documents, infrastructure, and technological support which the applicant is required to have.
(6) After verification of the application, documents, information furnished by the applicant and its eligibility, the Authority may: a. approve the application for requesting entity or Authentication Service Agency, as the case may be; and b. enter into appropriate agreements with the entity or agency incorporating the terms and conditions for use by requesting entities of the Authority’s authentication facility, or provision of services by ASAs, including damages and disincentives for non-performance of obligations.
(7) The Authority may from time to time, determine the fees and charges payable by entities during their appointment, including application fees, annual subscription fees and fees for individual authentication transactions.
(8) The Authority may from time to time, determine requesting entities which may be allowed to store Aadhaar number or masked Aadhaar number.
(9) The Authority may from time to time, determine the data fields to be provided as part of e-KYC response to particular requesting entities.
(10) The Authority may from time to time, determine if requesting entities will be allowed to perform authentication using Aadhaar number or Virtual ID or UID Token or ANCS or any other identifier.