The agencies, consultants, advisors and other service providers engaged by the Authority for discharging any function relating to its processes shall,-
(a) ensure compliance with the information security policy and such other policies and procedures specified by the Authority;
(b) periodically report compliance with the information security policy and other policies and procedures and contractual requirements, as required by the Authority;
(c) report promptly to the Authority about any security incidents affecting the confidentiality, integrity and availability of any information related to the Authority’s functions;
(d) ensure that records related to the Authority shall be protected from loss, destruction, falsification, unauthorised access and unauthorised release;
(e) ensure confidentiality obligations are maintained during the term and on termination of the agreement;
(f) ensure that appropriate security and confidentiality obligations are provided for in their agreements with their employees and staff members;
(g) ensure that the employees having physical access to Jan-Aadhaar Resident Data Repository and logical access to centers undergo necessary background checks;
(h) define the security perimeters holding sensitive information, and ensure that only the authorised individuals are allowed access to such areas to prevent any data leakage or misuse.