Analyzing Aadhaar Statements: A Detailed Examination

Let's carefully examine each of the provided statements regarding Aadhaar to determine their correctness based on the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016, and relevant judicial pronouncements.

We will go through each statement one by one.

Statement 1: Aadhaar metadata cannot be stored for more than three months.

This statement refers to the storage duration of Aadhaar authentication transaction logs or metadata. While the Aadhaar Act and regulations specify limitations on the storage of *core* biometric information, the rules for storing transaction metadata are complex and depend on the type of authentication and the purpose. For example, authentication transaction data (which includes metadata) is typically stored for a certain period (often specified in regulations or by UIDAI) for audit, security, and troubleshooting purposes. A blanket statement that it "cannot be stored for more than three months" for *all* types of Aadhaar metadata is generally not accurate as per the regulations and practices governed by the Unique Identification Authority of India (UIDAI). Storage periods can vary.

Based on this, Statement 1 appears to be incorrect.

Statement 2: State cannot enter into any contract with private corporations for sharing of Aadhaar data.

The Supreme Court, in its judgment on the constitutional validity of the Aadhaar Act, significantly restricted the use and sharing of Aadhaar data, particularly concerning private entities. The court struck down Section 57 of the Aadhaar Act, which allowed private entities to use Aadhaar for identification purposes. While specific arrangements for authentication (without sharing core biometric data) might exist under strict regulations for specific purposes, the general principle upheld is that the State cannot broadly contract with private corporations for sharing of sensitive Aadhaar data, especially the core biometric information. The law emphasizes that Aadhaar is primarily for state subsidies and benefits funded by the Consolidated Fund of India.

Based on this, Statement 2 appears to be correct in principle regarding the restriction on sharing Aadhaar data with private corporations.

Statement 3: Aadhaar is mandatory for obtaining insurance products.

The Supreme Court judgment on Aadhaar clarified that Aadhaar cannot be made mandatory for services provided by private entities. Insurance products are commercial services offered by private insurance companies. The court explicitly stated that Aadhaar cannot be insisted upon for such private services unless it is required by law for a purpose linked to the Consolidated Fund of India or other specific, legally permitted exceptions (which typically don't include standard commercial insurance). Making Aadhaar mandatory for obtaining insurance products would violate the principles laid down by the Supreme Court.

Based on this, Statement 3 is incorrect.

Statement 4: Aadhaar is mandatory for getting benefits funded out of the Consolidated Fund of India.

Section 7 of the Aadhaar Act, 2016, mandates that Aadhaar (or authentication thereof) can be required for individuals to receive any subsidy, benefit, or service where the expenditure is met from the Consolidated Fund of India. The Supreme Court upheld this particular provision, recognizing the state's interest in preventing leakage of public funds and ensuring targeted delivery of welfare schemes. Therefore, for accessing government subsidies and benefits paid for by the Consolidated Fund of India, Aadhaar linkage or proof of identity is indeed mandatory as per the law and the court's decision.

Based on this, Statement 4 is correct.

Summary of Statement Analysis:

• Statement 1: Incorrect
• Statement 2: Correct
• Statement 3: Incorrect
• Statement 4: Correct

The statements that are correct are 2 and 4.

Therefore, the option that lists only statements 2 and 4 as correct is the answer.

The correct statements are:

1. State cannot enter into any contract with private corporations for sharing of Aadhaar data.
2. Aadhaar is mandatory for getting benefits funded out of the Consolidated Fund of India.

The option corresponding to statements 2 and 4 only is the correct choice.

Revision Table: Key Points on Aadhaar Mandates

Additional Information: Understanding Aadhaar and Data Regulations

The Aadhaar ecosystem is governed by the Aadhaar Act, 2016, and is overseen by the Unique Identification Authority of India (UIDAI). Understanding the nuances of this Act and subsequent interpretations by the Supreme Court is crucial.

• Consolidated Fund of India: This is the main account of the Government of India where all revenues are credited and expenditures are debited. Section 7 of the Aadhaar Act links the mandatory use of Aadhaar specifically to benefits, subsidies, or services funded from this source.
• Data Security and Privacy: The Aadhaar Act includes provisions for securing the data collected. The Supreme Court judgment reinforced the importance of data privacy, leading to restrictions on how Aadhaar data can be used and shared, especially by private entities.
• Metadata vs. Core Biometric Data: It's important to distinguish between the core biometric information (fingerprints, iris scan) and transaction metadata (details about an authentication request, like time, location, requesting entity). Rules for storage, usage, and sharing differ for these data types.
• Supreme Court Judgment (2018): Key takeaways included upholding the constitutionality of the Act but striking down certain provisions (like Section 57) that allowed mandatory Aadhaar for private services. It reinforced that Aadhaar linkage is valid primarily for state-funded welfare schemes.

This analysis helps clarify the legal standing of different requirements related to Aadhaar based on current laws and judgments.