Biometric information deemed sensitive personal data; IT Act protections apply to electronic biometric records under Aadhaar. Biometric information collected and stored in electronic form under the Aadhaar Act is deemed an electronic record and sensitive personal data or information, and the provisions of the Information Technology Act, 2000 and its rules apply to such information in addition to, and to the extent not in derogation of, the Aadhaar Act; the section cross-references the IT Act definitions for 'electronic form', 'electronic record' and 'sensitive personal data or information'.