Consider the following statements:
1. Aadhaar metadata cannot be stored for more than three months.
2. State cannot enter into any contract with private corporations for sharing of Aadhaar data.
3. Aadhaar is mandatory for obtaining insurance products.
4. Aadhaar is mandatory for getting benefits funded out of the Consolidated Fund of India.
Which of the statements given above is/are correct?