Aadhaar and Your Data Privacy Rights: What the Law Actually Protects

AadhaarData PrivacyDPDP ActBiometricsDigital Rights

Aadhaar is India's biometric identity system — a 12-digit unique number linked to your fingerprints and iris scan, stored in UIDAI's database. With 136+ crore enrollments, it is the world's largest biometric database. The Supreme Court's Puttaswamy judgment (2017) upheld Aadhaar's constitutionality while placing critical limits on who can demand it — limits that are routinely violated.

Important: Private companies CANNOT demand Aadhaar

After the 2018 Supreme Court judgment in Puttaswamy II, private entities (banks, telecom companies, hotels, landlords, offices) CANNOT mandate Aadhaar authentication. Only government services specifically authorised by law can require Aadhaar. Showing your PAN, passport, or voter ID is legally sufficient for private purposes.

Where Aadhaar is mandatory vs optional

Mandatory (by law)

Optional (cannot be forced)

Government schemes

PDS rations, MNREGA wages, PMJAY, PM-KISAN

Not applicable — these are government bodies

Income tax

PAN-Aadhaar linking mandatory (Income Tax Act)

—

Banking

For new account KYC (but alternatives allowed by RBI)

Private bank cannot reject non-Aadhaar KYC

Telecom SIM

e-KYC via Aadhaar voluntary — OTP-based

Physical documents are equally valid

Hotels/landlords

CANNOT demand Aadhaar

Voter ID, passport are legally sufficient

The Digital Personal Data Protection Act, 2023

India's Digital Personal Data Protection (DPDP) Act, 2023 is the first comprehensive data protection law. It gives every citizen the right to know what data an organisation holds about them, the right to correct it, the right to withdraw consent, and the right to erasure ('right to be forgotten') in certain cases. Data fiduciaries (entities holding your data) must respond to requests within 72 hours and can be fined up to ₹250 crore for breaches.

Your Rights Under the DPDP Act 2023

Right to access: Know what personal data a company holds about you
Right to correction: Request correction of inaccurate data
Right to erasure: Request deletion when the purpose is served
Right to grievance redressal: Company must respond within 72 hours
Right to nominate: Designate someone to exercise rights on your behalf after death
Penalty for breach: Up to ₹250 crore on data fiduciary; ₹10,000 on individuals filing false complaints

Tip: How to lock your Aadhaar biometrics

Visit myaadhaar.uidai.gov.in → Aadhaar Lock & Unlock. You can lock your biometrics so that no one can authenticate using your fingerprints or iris, even if they have your Aadhaar number. Unlock temporarily when needed. This is a free, instant protection against unauthorised biometric use.

Check Your Understanding

Can a hotel in India legally refuse you a room if you don't provide your Aadhaar card?

Deepak Rao

Ground Correspondent

12 articles published

Aadhaar and Your Data Privacy Rights: What the Law Actually Protects

The Digital Personal Data Protection Act, 2023

Know Your RTI Rights: How to File and What Happens Next

Your Rights with the Police: FIRs, Arrests, and What the Law Actually Protects

Consumer Rights in India: How to Fight Back Against Bad Products and Services