Identity information disclosure of enrolment or authentication data attracts imprisonment or fines under the Aadhaar Act. Unauthorised disclosure of identity information collected during enrolment or authentication is criminalised where a person intentionally discloses, transmits, copies or disseminates such information to any person not authorised under the Act or its regulations, or in contravention of agreements made pursuant to the Act; the provision attaches penal consequences, including imprisonment and fines, with distinct corporate liability for companies.