Consider the following statements: 1. Aadhaar metadata cannot be stored for more than three months. 2. State cannot enter into any contract with private corporations for sharing of Aadhaar data. 3. Aadhaar is mandatory for obtaining insurance products. 4. Aadhaar is mandatory for getting benefits funded out of the Consolidated Fund of India. Which of the statements given above is/are correct?

1. Statement 1 is incorrect. As per the Aadhaar Act regulations, Aadhaar metadata (specifically authentication logs) can be stored for up to six months, not three months. 2. Statement 2 is correct. The Supreme Court, in its judgment, struck down Section 57 of the Aadhaar Act, 2016, which allowed private entities to use Aadhaar for verification. The State cannot enter into contracts with private corporations for the sharing of Aadhaar data, upholding privacy principles. 3. Statement 3 is incorrect. The Supreme Court ruled that Aadhaar cannot be made mandatory for services like bank accounts, mobile connections, or insurance products. 4. Statement 4 is correct. Section 7 of the Aadhaar Act states that Aadhaar can be made mandatory for receiving subsidies, benefits, or services funded from the Consolidated Fund of India. The Supreme Court upheld the validity of Section 7. 5. Thus, statements 2 and 4 are correct.