Section 37:
Penalty for disclosing identity information.
Whoever, intentionally discloses, transmits,
copies or otherwise disseminates any identity information collected in the course of enrolment or
authentication to any person not authorised under this Act or regulations made thereunder or in
contravention of any agreement or arrangement entered into pursuant to the provisions of this Act, shall
be punishable with imprisonment for a term which may extend to three years or with a fine which may
extend to ten thousand rupees or, in the case of a company, with a fine which may extend to one lakh
rupees or with both.