Security and confidentiality of information.

(1) The Authority shall ensure the security of data maintained by it.

(2) Subject to the provisions of this Act, the Authority shall ensure confidentiality of data of families maintained by it.

(3) The Authority shall take all necessary measures to ensure that the data in the possession or control of the Authority, including information stored in the Family Information Data Repository is secured and protected against unauthorised access, use or disclosure and against accidental or intentional destruction, loss or damage.

(4) Without prejudice to sub-sections (1) and (2), the Authority shall— (a) adopt and implement appropriate technical and organisational security measures; (b) ensure that any person appointed or engaged for performing any function of the Authority under this Act or rules or regulations made thereunder follows appropriate technical and organisational security measures; (c) ensure that the agreements or arrangements entered into with any person impose obligations equivalent to those imposed on the Authority under this Act and require such person to act only on instructions from the Authority or powers delegated by or on behalf of the Authority.

(5) Notwithstanding anything contained in any other State law for the time being in force and save as otherwise provided by or under this Act, no officer or other employee of the Authority shall, whether during his service or thereafter, reveal any data stored in the Family Information Data Repository or authentication record to anyone except for the purposes of planning or evaluation by the State Government or for the purpose of determining eligibility for or the provision of any subsidy, scheme, service or benefit.

(6) The information collected, verified or authenticated by the Authority in the Family Information Data Repository or created under this Act shall be shared only in such manner, as may be specified by regulations.

(7) No information of a family collected, verified or authenticated by the Authority in the Family Information Data Repository or created under this Act shall be published, displayed or posted publicly, except for the purposes, as may be specified by regulations.