The draft says that a person will be imprisoned upto three years or will have to pay a fine upto Rs. 10,000 if he or she “intentionally discloses, transmits, copies or otherwise disseminates any identity information collected in the course of enrollment or authentication to any person not authorised”.
In the case of a company, the fine may extend to Rs. 1 lakh. Any person caught accessing Central Identities Data Repository (central databank) and is not authorised by UIDAI will be punished with imprisonment for a term which may extend to three years and will be liable to a fine which shall not be less than Rs. 1 crore.