Yes. Yup, there are personal details available easily. A search for "aadhaar number filteype

ls inurl:gov.in" used to yield a lot of interesting results, and may still do so now, even though many documents have been scrubbed.
Personal details of top politicians were available online because of the Narendra Modi app. Dig into the urls in screenshots, you guis might find something interesting.
The data protection whitepaper has just a little bit of overlap with Aadhaar. It is more about what kind of regulations are necessary for the data protection in emerging technologies such as IOT, big data, AI, as well as exemptions for official, research and journalistic use. It does not address the core issues with Aadhaar, that is if the government should have the most intimate details of people, and if they should be a part of everyone's daily lives.
UIDAI is a fortress, there is nothing that can be done till there is widespread outrage, which will follow only after a major incident. Like someone gets hanged for a crime then they find out that they got the wrong man, by matching the fingerprint. Even then, the UIDAI will put out a press release saying it is not their fault, that they only provide a service, and that they had indicated all along that it had a 0.057 chance of false positives, and that it is the fault of the police.
Either that, or the Government pro actively works to restoring civil liberties, which happened in the UK. They even collected DNA along with biometric data, all of it was nuked, because it "demonstrates the government’s commitment to scale back the power of the state and restore civil liberties." Those IDs were around for six years before the database was destroyed, so I am anticipating that Aadhaar critics in India will have to wait at least as long before something gets done.
It is always the fault of the contracted agency, the onboarding service, the Income Tax Department, the Department of Telecom, the police services, banks, utility services and so on. UIDAI has a flawless record. It has not committed a single mistake, ever. It's servers have never been breached. All it does is provide a service.
lets rename this thread specifically for Aadhar discussion.
done, and stickied