Section 40

Penalty for unauthorised use by requesting entity or offline verification-seeking entity

Whoever,

1. being a requesting entity, uses the identity information of an individual in contravention of sub-section (2) of section 8; or
2. being an offline verification-seeking entity, uses the identity information of an individual in contravention of sub-section (2) of section 8A, shall be punishable with imprisonment which may extend to three years or with a fine which may extend to ten thousand rupees or, in the case of a company, with a fine which may extend to one lakh rupees or with both.