Regulation 5 Responsibility of any agency or entity other than requesting entity with respect to Aadhaar number

(1) Any individual, agency or entity which collects Aadhaar number or any document containing the Aadhaar number, shall:

(a) collect, store and use the Aadhaar number for a lawful purpose;

(b) inform the Aadhaar number holder the following details:- i. the purpose for which the information is collected; ii. whether submission of Aadhaar number or proof of Aadhaar for such purpose is mandatory or voluntary, and if mandatory, the legal provision mandating it; iii. alternatives to submission of Aadhaar number or the document containing Aadhaar number, if any;

(c) obtain consent of the Aadhaar number holder to the collection, storage and use of his Aadhaar number for the specified purposes.

(2) Such individual, agency or entity shall not use the Aadhaar number for any purpose other than those specified to the Aadhaar number holder at the time of obtaining his consent.

(3) Such individual, agency or entity shall not share the Aadhaar number with any person without the consent of the Aadhaar number holder. [

Provided that the same shall not be required in case of deactivation of Aadhaar of a deceased person under clause (ea) of sub-regulation (1) of Regulation 28 of The Aadhaar (Enrolment and Update) Regulations,2016.