Home India UNIQUE IDENTIFICATION AUTHORITY OF INDIA In exercise of the powers conferred by sub sections 1 and 2 ...
Date: 31-Jan-2024 Category: Extra Ordinary State: Union Government Country: India

In exercise of the powers conferred by sub sections 1 and 2 of section 54 of the Aadhaar

Issued by UNIQUE IDENTIFICATION AUTHORITY OF INDIA · Not Applicable

Research with AI Agent Chat with Document Generate Summary Translate Helpful Share Add to Project Create Task

Executive Summary & Key Takeaways

What it means

  • The gazette notification issued by the Unique Identification Authority of India (UIDAI) introduces the Aadhaar (Authentication and Offline Verification) Amendment Regulations, 2024. These regulations further amend the Aadhaar (Authentication and Offline Verification) Regulations, 2021.
  • The amendments primarily focus on refining the definitions and processes related to e-KYC authentication and Yes/No authentication facilities, as well as clarifying the handling of Aadhaar number statuses such as cancellation, deactivation, locking, and biometrics locking.

Key Changes

  • Regulation 2 is amended to redefine 'e-KYC authentication facility'. The revised definition includes the process where biometric information, OTP, and Aadhaar number are securely submitted with the consent of the Aadhaar holder and matched against CIDR data. The UIDAI returns a digitally signed response containing e-KYC data and technical details. It also includes subsequent responses regarding the status of an Aadhaar number, whether it has been omitted, deactivated, or reactivated.
  • Regulation 2 is amended to redefine 'Yes/No authentication facility'. The revised definition includes the process where identity information and Aadhaar number are securely submitted with the consent of the Aadhaar holder and matched against CIDR data. The UIDAI responds with a digitally signed 'Yes' or 'No', along with technical details, but without identity information. It also includes subsequent responses regarding the status of an Aadhaar number, whether it has been omitted, deactivated, or reactivated.
  • Regulation 9 is amended to change the short title from the previous title to 'Process for performance of authentication'.
  • Regulation 9 is amended to replace sub-regulation (3). The new sub-regulation (3) details the process following an authentication request, where the UIDAI matches input parameters against the Aadhaar number information in CIDR and verifies its correctness. The UIDAI then returns a digitally signed 'Yes' or 'No' response, or an e-KYC response with encrypted e-KYC data, along with technical details.
  • Regulation 9 includes a new sub-regulation (3A). This specifies that if a requesting entity has an agreement with the UIDAI for authentication with status updates (omission, deactivation, reactivation of an Aadhaar number), the UIDAI will send a subsequent digitally signed appropriate response with related technical details.
  • Regulation 10 is amended to replace the words 'failure such as Suspended/Cancelled Aadhaar or Biometric/Aadhaar Locking' with 'failure, such as “Aadhaar cancelled”, “Aadhaar deactivated”, “Aadhaar locked”, “Aadhaar omitted”, “Aadhaar suspended” and “Biometrics locked”'.
  • Regulation 10 includes a new sub-regulation (4) to define the expressions 'Aadhaar cancelled' or 'Aadhaar omitted', 'Aadhaar deactivated' or 'Aadhaar suspended', 'Aadhaar locked', and 'Biometrics locked' in relation to an Aadhaar number.

Impact Analysis

Requesting Entities (Banks, Financial Institutions, Service Providers)

  • Action Items: Review and update agreements/Memorandum of Understanding with UIDAI to incorporate the handling of Aadhaar status updates. Modify systems to correctly interpret and act upon the new status codes provided in authentication responses. Update internal processes and training materials to reflect these changes.

Aadhaar Holders

  • Action Items: No direct action required from Aadhaar holders. However, they should be informed about the enhanced security and accuracy measures being implemented.

UIDAI

  • Action Items: Update CIDR infrastructure to efficiently manage and disseminate Aadhaar status information. Ensure compliance with the updated regulations. Communicate the changes to requesting entities and the public.

Key Entities Referenced

UIDAI: Unique Identification Authority of India, the issuing authority of the gazette notification and responsible for Aadhaar administration. Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016: The principal legislation that empowers UIDAI to make regulations regarding Aadhaar. Aadhaar (Authentication and Offline Verification) Regulations, 2021: The original regulations that are being amended by this notification. CIDR: Central Identities Data Repository, which stores the data against which Aadhaar authentication requests are matched.
Official Source Record View Original Source →
See Full Document Text
रजिस्ट्री स.ं डी.एल.- 33004/99 REGD. No. D. L.-33004/99 सी.जी.-डी.एल.-अ.-31012024-251666 xxxGIDHxxx CG-DL-E-31012024-251666 xxxGIDExxx असाधारण EXTRAORDINARY भाग III—खण् ड 4 PART III—Section 4 प्राजधकार स ेप्रकाजित PUBLISHED BY AUTHORITY स.ं 70] नई दिल्ली, बधु िार, िनिरी 31, 2024/माघ 11, 1945 No. 70] NEW DELHI, WEDNESDAY, JANUARY 31, 2024/MAGHA 11, 1945 भारतीय जिजिष्ट पहचान प्राजधकरण अजधसचू ना नई दिल्ली, 31 िनिरी, 2024 फा. स.ंएचक्य-ू 13073/1/2020-एयटू ीएच.II(ई).—आधार (जित्तीय और अन्य सहाजयदकयों, प्रसुजिधाओं और सेिाओं का लजययत पररिान) अजधजनयम, 2016 (2016 का 18) की धारा 54 की उप-धारा (1) और (2) द्वारा प्रित्त िजियों का प्रयोग करते हुए, भारतीय जिजिष्ट पहचान प्राजधकरण एतद्द्वारा आधार (अजधप्रमाणन और ऑफलाइन सत्यापन) जिजनयम, 2021 को और संिोजधत करने के जलए जनम्नजलजखत जिजनयम बनाता है, नामत: :— 1. सजं िप्त नाम और प्रारंभ.—(1)इन जिजनयमों को आधार (अजधप्रमाणन और ऑफलाइन सत्यापन) संिोधन जिजनयम, 2024 कहा िाएगा। (2) य ेसरकारी रािपत्र में इनके प्रकािन की तारीख से प्रिृत्त होंगे। 2. आधार (अजधप्रमाणन और ऑफलाइन सत्यापन) जिजनयम, 2021 (जिन्ह ें इसमें इसके पश्च ात् मूल जिजनयम कहा गया ह)ै म,ें जिजनयम 2 म,ें उप-जिजनयम (1) में,— (क) खंड (ठ) के जलए, जनम्नजलजखत जिजनयम प्रजतस्ट्थाजपत दकया िाएगा, नामत: :— '(ठ) ‘’ई-केिाईसी अजधप्रमाणन सुजिधा" का अजभप्राय एक प्रकार की अजधप्रमाणन सुजिधा से है— (i) जिसमें अनुरोधकताा संस्ट्था के िररए आधार नंबर धारक की सहमजत से सुरजित तरीके से प्रस्ट्तुत बायोमेररक सूचना और/यािन-टाइम जपन (ओटीपी) और आधार नंबर का जमलान सीआईडीआर में उपलब्ध डेटा स े दकया िाता है, और प्राजधकरण अजधप्रमाणन संव्यिहार से संबंजधत अन्य 612 GI/2024 (1)2 THE GAZETTE OF INDIA : EXTRAORDINARY [PART III—SEC.4] तकनीकी ब्यौरों सजहत ई-केिाईसी डेटा से युि जडजिटल तौर पर हस्ट्तािररत उत्तर भेिता ह;ै और (ii) जिसमें पूिा म ें प्रस्ट्ततु दकए गए दकसी आधार नंबर, ऐसे आधार नंबर के लोप या जनजरियण या ऐसे जनजरिय दकए गए आधार नंबर के पनु : सदिय दकए िान े पर, का तत्पश्चात ् लोप या जनजरियण या पुनः सदिय होना हुआ ह ै इसकी जस्ट्थजत के संबंध में भेिा गया कोई भी पश्चात्िती समुजचत उत्तर सजममजलत ह ै: परंत ु यह दक अनरु ोधकताा सस्ट्ं था ने ऐसी जस्ट्थजत के अद्यतीकरण सजहत अजधप्रमाणन करने के जलए प्राजधकरण के साथ कोई समझौता ज्ञापन या करार दकया है;' ; (ख) खंड (ि) के जलए, जनम्नजलजखत जिजनयम प्रजतस्ट्थाजपत दकया िाएगा, नामत: :— '(ि) ’’हां/ना अजधप्रमाणन’’ का अजभप्राय एक प्रकार की अजधप्रमाणन सुजिधा से है— (i) जिसमें अनुरोधकताा संस्ट्था के िररए आधार नंबर धारक की सहमजत से सुरजित तरीके से प्रस्ट्तुत पहचान सूचना और आधार नबं र का जमलान सीआईडीआर में उपलब्ध डेटा से दकया िाता ह,ै और प्राजधकरण अजधप्रमाणन सव्यं िहार से संबंजधत अन्य तकनीकी ब्यौरों सजहत ‘‘हा’ं’ या ‘‘ना’’ से युि, परंतु पहचान सूचना से रजहत, जडजिटल तौर पर हस्ट्तािररत उत्तर भेिता ह;ै और (ii) जिसमें पूिा में प्रस्ट्ततु दकए गए दकसी आधार नंबर, ऐसे आधार नंबर के लोप या जनजरियण या ऐसे जनजरिय दकए गए आधार नंबर के पुन: सदिय दकए िाने पर, का तत्पश्चात् लोप या जनजरियण या पुनः सदिय होना हुआ ह ै इसकी जस्ट्थजत के संबंध म ें भेिा गया कोई भी पश्चात्िती समुजचत उत्तर सजममजलत ह ै: परंत ु यह दक अनरु ोधकताा संस्ट्था न े ऐसी जस्ट्थजत के अद्यतीकरण सजहत अजधप्रमाणन करन े के जलए प्राजधकरण के साथ कोई समझौता ज्ञापन या करार दकया ह।ै '। 3. मूल जिजनयमों म,ें जिजनयम 9 में,— (क) संजिप्त िीर्ाक के जलए, जनम्नजलजखत संजिप्त िीर्ाक को प्रजतस्ट्थाजपत दकया िाएगा, नामत: :— ’’अजधप्रमाणन करन ेके जलए प्रदिया’’; और (ख) उप-जिजनयम (3) के जलए, जनम्नजलजखत उप-जिजनयमों को प्रजतस्ट्थाजपत दकया िाएगा, नामत: :— ‘’(3) अजधप्रमाणन अनुरोध के माध्यम के आधार पर, सीआईडीआर म ें उपलब्ध आधार नबं र की सूचना के जिरुद्ध आगत प्राचलों (इनपुट पैरामीटसा) से जमलान और सीआईडीआर द्वारा उसकी िुद्धता या िुद्धता म ें कमी के सत्यापन के पश्चात्, प्राजधकरण संबंजधत तकनीकी ब्यौरों सजहत जडजिटल तौर पर हस्ट्तािररत ‘‘हां’’ या ‘‘ना’’ उत्तर, या कूटकृत ई-केिाईसी डेटा सजहत ई-केिाईसी उत्तर, िैसी भी जस्ट्थजत हो, भेिगे ा। (3क) िहां पूिा में प्रस्ट्तुत दकए गए दकसी आधार नंबर, ऐसे आधार नंबर के लोप या जनजरियण या ऐसे जनजरिय दकए गए आधार नंबर के पुन: सदिय दकए िाने पर, का तत्पश्चात् लोप या जनजरियण या पनु ः सदिय होना हुआ ह,ै के संबंध में अद्यतीकरण की जस्ट्थजत सजहत अजधप्रमाणन करने के जलए अनरु ोधकताा संस्ट्था द्वारा प्राजधकरण के साथ कोई समझौता ज्ञापन या करार दकया गया ह,ै प्राजधकरण संबंजधत तकनीकी ब्यौरों सजहत जडजिटल तौर पर हस्ट्तािररत पश्चात्िती समुजचत उत्तर भेिेगा।”। 4. मूल जिजनयमों म,ें जिजनयम 10 में,— (क) उप-जिजनयम (3) म,ें ‘’असफल होन े के कारणों, िैस े स्ट्थजगत/रद्द आधार या बायोमेररक/आधार लॉककंग’’ िब्िों के जलए, ‘असफल होने के कारणों, िैसे ‘’आधार रद्द’’, ‘’आधार जनजरिय’’, ‘’आधार लॉक ह’ै’, ‘’आधार जिलोजपत’’, ‘’आधार स्ट्थजगत’’ और ‘’बायोमेररक्स लॉक ह’ैं’’ िब्ि प्रजतस्ट्थाजपत दकए िाएंगे; (ख) उप-जिजनयम (3) के पश्चात्, जनम्नजलजखत उप-जिजनयम अंत:स्ट्थाजपत दकया िाएगा, नामत: :— ‘’(4) उप-जिजनयम (3) में, अजभव्यजि— (i) आधार नंबर के संबंध म,ें ‘’आधार रद्द’’ या ‘’आधार जिलोजपत’’ का अजभप्राय होगा दक ऐसे आधार नंबर का लोप कर दिया गया ह;ै[भाग III—खण् ड 4] भारत का रािपत्र : असाधारण 3 (ii) आधार नंबर के संबंध म,ें ‘’आधार जनजरिय’’ या ‘’स्ट्थजगत आधार’’ का अजभप्राय होगा दक ऐसे आधार नंबर को जनजरिय कर दिया गया है; (iii) आधार नंबर के संबंध में, ‘’आधार लॉक ह’ै’ का अजभप्राय होगा दक ऐसे आधार नंबर को जिजनयम 11क में यथा-जनर्िाष्ट अनुसार लॉक कर दिया गया ह;ै और (iv) आधार नंबर के संबंध म,ें ‘’बायोमरे रक्स लॉक ह’ैं’ का अजभप्राय होगा दक ऐसे आधार नबं र स े संबंजधत बायोमेररक अजभलेख जिजनयम 11 में यथा-जनर्िष्टा अनसु ार लॉक कर दिय ेगय े ह।ैं ’’। संिीि यािि, जनिेिक [जिज्ञापन-III/4/असा./723/2023-24] नोट : मलू जिजनयम भारत का रािपत्र, असाधारण, भाग-III, खंड-4 में दिनांक 9 निंबर, 2021 म ें अजधसूचना संख्या के-11020/240/2021/एयूटीएच/यूआईडीएआई (2021 की संख्या 2), दिनांक 8 निंबर, 2021 द्वारा प्रकाजित दकए गए थे, और तत्पश्चात ् अजधसूचना— (i) फा. सं. के-11020/240/2021/एयूटीएच./यआू ईडीएआई (2022 की संख्या 01) दिनांक 4 फरिरी, 2022; (ii) फा. सं. एचक्यू-13011/2/2021/एयूटीएच-II (2023 की संख्या 01) दिनांक 24 फरिरी, 2023 (27 फरिरी, 2023 को प्रकाजित); और (iii) फा. सं. एचक्यू-13073/1/2020-एयूटीएच.II(ई) दिनांक 29 जसतंबर, 2023 (3 अिूबर, 2023 को प्रकाजित), द्वारा संिोजधत दकये गय ेथ।े UNIQUE IDENTIFICATION AUTHORITY OF INDIA NOTIFICATION New Delhi, the 31st January, 2024 F. No. HQ-13073/1/2020-AUTH.II(E).—In exercise of the powers conferred by sub-sections (1) and (2) of section 54 of the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016 (18 of 2016), the Unique Identification Authority of India hereby makes the following regulations to further amend the Aadhaar (Authentication and Offline Verification) Regulations, 2021, namely:— 1. Short title and commencement.—(1) These regulations may be called the Aadhaar (Authentication and Offline Verification) Amendment Regulations, 2024. (2) They shall come into force on the date of their publication in the Official Gazette. 2. In the Aadhaar (Authentication and Offline Verification) Regulations, 2021 (hereinafter referred to as the principal regulations), in regulation 2, in sub-regulation (1),— (a) for clause (j), the following clause shall be substituted, namely:— ‘(j) “e-KYC authentication facility” means a type of authentication facility— (i) in which the biometric information and/or OTP and Aadhaar number securely submitted with the consent of the Aadhaar number holder through a requesting entity, is matched against the data available in the CIDR, and the Authority returns a digitally signed response containing e-KYC data along with other technical details related to the authentication transaction; and (ii) includes any subsequent appropriate response returned by the Authority regarding the status as to whether any Aadhaar number previously submitted has been subsequently omitted or deactivated or re-activated in the event of any omission or deactivation of such Aadhaar number or re-activation of such a deactivated Aadhaar number: Provided that the requesting entity has entered into a Memorandum of Understanding or agreement with the Authority for the performance of authentication with update of such status;’; (b) for clause (p), the following clause shall be substituted, namely:— ‘(p) “Yes/No authentication facility” means a type of authentication facility— (i) in which the identity information and Aadhaar number securely submitted with the consent of the Aadhaar number holder through a requesting entity, is then matched against the data available in the CIDR, and the Authority responds with a digitally signed response containing4 THE GAZETTE OF INDIA : EXTRAORDINARY [PART III—SEC.4] “Yes” or “No”, along with other technical details related to the authentication transaction, but no identity information; and (ii) includes any subsequent appropriate response returned by the Authority regarding the status as to whether any Aadhaar number previously submitted has been subsequently omitted or deactivated or re-activated in the event of any omission or deactivation of such Aadhaar number or re-activation of such a deactivated Aadhaar number: Provided that the requesting entity has entered into a Memorandum of Understanding or agreement with the Authority for the performance of authentication with update of such status.’. 3. In the principal regulations, in regulation 9,— (a) for the short title, the following short title shall be substituted, namely:— “Process for performance of authentication”; and (b) for sub-regulation (3), the following sub-regulations shall be substituted, namely:— “(3) Based on the mode of authentication request, after the input parameters have been matched against the information of the Aadhaar number available in the CIDR and CIDR has verified the correctness or lack thereof, the Authority shall return a digitally signed Yes or No response, or a digitally signed e-KYC response with encrypted e-KYC data, as the case may be, along with related technical details. (3A) Where the requesting entity has entered into a Memorandum of Understanding or agreement with the Authority for the performance of authentication with update of status regarding whether an Aadhaar number previously submitted has been subsequently omitted or deactivated or re-activated, in the event of such Aadhaar number being omitted or deactivated or such a deactivated Aadhaar number being re- activated, the Authority shall send a subsequent digitally signed appropriate response, along with related technical details.”. 4. In the principal regulations, in regulation 10,— (a) in sub-regulation (3), for the words “failure such as Suspended/Cancelled Aadhaar or Biometric/Aadhaar Locking”, the words ‘failure, such as “Aadhaar cancelled”, “Aadhaar deactivated”, “Aadhaar locked”, “Aadhaar omitted”, “Aadhaar suspended” and “Biometrics locked”’ shall be substituted; (b) after sub-regulation (3), the following sub-regulation shall be inserted, namely:— “(4) In sub-regulation (3), the expression— (i) “Aadhaar cancelled” or “Aadhaar omitted”, in relation to an Aadhaar number, shall mean that such Aadhaar number has been omitted; (ii) “Aadhaar deactivated” or “Aadhaar suspended”, in relation to an Aadhaar number, shall mean that such Aadhaar number has been deactivated; (iii) “Aadhaar locked”, in relation to an Aadhaar number, shall mean that such Aadhaar number has been locked as referred to in regulation 11A; and (iv) “Biometrics locked”, in relation to an Aadhaar number, shall mean that the biometric records related to such Aadhaar number have been locked as referred to in regulation 11.”. SANJEEV YADAV, Director [ADVT.-III/4/Exty./723/2023-24] Note : The principal regulations were published in the Gazette of India, Extraordinary, Part III, Section 4, dated the 9th November, 2021, vide Notification F. No. K-11020/ 240/ 2021/ Auth/UIDAI (No. 2 of 2021), dated the 8th November 2021, and were subsequently amended vide Notifications— (i) F. No. K-11020/240/2021/Auth/UIDAI (No. 01 of 2022), dated the 4th February, 2022; (ii) F. No. HQ-13011/2/2021-AUTH-II (No. 01 of 2023), dated the 24th February, 2023 (published on the 27th February, 2023); and (iii) F. No. HQ-13073/1/2020-AUTH.II(E), dated the 29th September, 2023 (published on the 3rd October, 2023). Uploaded by Dte. of Printing at Government of India Press, Ring Road, Mayapuri, New Delhi-110064 and Published by the Controller of Publications, Delhi-110054.

Continue your research