With regard to point 3, the disclosure of aadhar data can result in prosecution, but the prosecution can only be done by the Aadhar agency. The agency itself

With regard to point 3, the disclosure of aadhar data can result in prosecution, but the prosecution can only be done by the Aadhar agency. The agency itself disclosed Aadhar data at some point, so it remains to be seen if they will take themselves (or anyone at this point) to court.