Unauthorized use of Aadhaar identity information by requesting or offline verification entities may attract imprisonment or monetary penalties. The substituted provision penalises a requesting entity that uses an individual's identity information in contravention of the statutory use restrictions, and an offline verification-seeking entity that does likewise for offline verification. Liability is linked to breach of those use limitations and applies to entities defined by role.