- Authentication logs are stored for 5 years. - Sharing of Aadhaar data, especially core biometrics, with private entities is heavily restricted. - Aadhaar cannot be mandatory for services not funded by the Consolidated Fund of India (like insurance). - Aadhaar can be mandatory for benefits/services funded by the Consolidated Fund of India.