Aadhaar rulemaking expanded to specify ecosystem entities, virtual ID, cancellation, privacy standards and offline verification obligations. Expansion of rulemaking authority under section 54 prescribes detailed subjects for subordinate legislation including entities in the Aadhaar ecosystem, biometric and demographic information, enrolment collection processes, modes of offline verification, manner of generating alternative virtual identity, procedure for Aadhaar cancellation, standards of privacy and security, classification of requesting entities, alternate means of identification, and requirements for consent and obligations of offline verification-seeking entities.