After section 4 of the principal Act, the following section shall be inserted, namely:—

"4A. (1) Every offline verification-seeking entity shall—

(a) obtain the consent of an individual, or in the case of a child, his parent or guardian, before performing offline verification of the individual;

(b) inform the individual, or in the case of a child, his parent or guardian, of the following details with respect to offline verification, namely:—

(i) the nature of information that may be shared upon offline verification;

(ii) the uses to which the information received during offline verification may be put by the offline verification-seeking entity; and

(iii) alternatives to submission of information requested for, if any; and

(c) not collect, use or store Aadhaar number or biometric information of any individual for any purpose.

(2) Every offline verification-seeking entity shall, unless otherwise provided in any law made by Parliament, comply with the standards of privacy and security specified by regulations."