Authorities in India have limited, purpose-specific powers to request Aadhaar or biometrics. These are tightly regulated by the Aadhaar Act 2016 (as amended), the Supreme Court’s 2018 *Puttaswamy* judgment, the Criminal Procedure (Identification) Act 2022, and related rules. There is no general or unlimited power to demand them.
### Aadhaar Number and Authentication
- Enrolment is voluntary in principle. Every resident is *entitled* to get an Aadhaar by providing demographic and biometric data, but it is not compulsory for ordinary life.
- Mandatory use is restricted. Under Section 7 of the Aadhaar Act, the Central or State Government may require Aadhaar authentication (or proof of possession/application) as a condition for receiving subsidies, benefits, or services funded from the Consolidated Fund of India or a State. Even then, if you do not have an Aadhaar, alternate and viable means of identification must be offered. The Supreme Court in *Justice K.S. Puttaswamy (Retd.) v. Union of India* (2018) upheld this for welfare benefits and certain tax-related purposes (e.g., PAN linkage) as proportionate.
- For most other purposes (many private services, certain educational or non-welfare uses), Aadhaar cannot be made mandatory. The Court struck down the earlier broad provision allowing private entities unrestricted use and limited mandatory linkage for things like bank accounts and mobile connections at the time. Subsequent legislative and regulatory changes have re-opened limited private-sector authentication under stricter conditions, but the constitutional limits of proportionality and privacy still apply.
- Consent is generally required for authentication. Requesting entities must inform you of the purpose and use the data only for that authentication.
### Core Biometric Data (Fingerprints, Iris Scans)
These receive the strongest protection:
- Under Section 29(1) of the Aadhaar Act, core biometric information cannot be shared with anyone for any reason or used for any purpose other than generating the Aadhaar number or performing authentication under the Act.
- Even under a court order (Section 33), core biometrics are not disclosed. Only other identity information or authentication records (e.g., demographic details, Aadhaar number, limited transaction logs) may be shared pursuant to an order of a court not inferior to a High Court Judge (after giving UIDAI a hearing) or, in limited national-security cases, by a specially authorised senior officer subject to oversight.
- Police or other authorities cannot routinely access the Central Identities Data Repository (CIDR) or pull your Aadhaar biometrics.
### Separate Power to Collect Biometrics for Criminal Investigation
This is distinct from accessing the Aadhaar database:
- The Criminal Procedure (Identification) Act, 2022 (replacing the older Identification of Prisoners Act) authorises police and investigating agencies to collect a wide range of “measurements,” including fingerprints, palm prints, footprints, photographs, iris/retina scans, physical/biological samples, and behavioural attributes, from:
-
Persons convicted of offences,
-
Persons arrested in connection with offences,
-
Persons under preventive detention, and
-
Any person directed by a Magistrate when it is expedient for investigation or legal proceedings.
- These are newly collected biometrics stored in police/NCRB systems (with long retention periods), not pulled from Aadhaar. Implementation has begun in some states (e.g., Delhi, Rajasthan). The law has faced constitutional challenges on privacy and proportionality grounds.
### Practical Limits and Constitutional Safeguards
- Any demand must satisfy the *Puttaswamy* three-part test: it must have a valid legal basis (legality), pursue a legitimate state aim (e.g., welfare delivery, crime investigation, national security), and be necessary and proportionate.
- Blanket or routine demands without statutory backing or for purposes outside the permitted categories are not allowed. Refusal of Aadhaar for non-permitted purposes sh
ould not result in denial of essential services where alternatives exist.
- Recent developments (e.g., 2026 Telecom User Identification Rules requiring biometric e-KYC, including Aadhaar-based, for SIM connections) expand collection points and have raised privacy and exclusion concerns; their full compatibility with the 2018 judgment may be tested in court.
In short: Authorities can require Aadhaar mainly for government welfare/benefits under Section 7 (with alternatives) and can collect independent biometrics under the 2022 criminal identification law in specified investigation/conviction contexts. Core Aadhaar biometrics themselves remain highly protected and are almost never shared. Outside these defined situations, demands are restricted by statute and the fundamental right to privacy under Article 21.
Laws and notifications continue to evolve, and application can depend on the specific authority, purpose, and facts. For a personal situation, consult a lawyer or refer to the latest UIDAI guidelines and relevant High Court/Supreme Court orders.
If gas companies (LPG distributors/oil marketing companies) or banks are demanding Aadhaar or biometrics in ways that go beyond the law, or denying essential services, it can amount to a violation of your rights, particularly the fundamental right to privacy under Article 21 (as affirmed in the 2018 *Puttaswamy* judgment) and related rights to equality and access to essential services.
### Legal Position for Banks
- Aadhaar is not mandatory for opening or operating a bank account.
- The Supreme Court in *Puttaswamy* (2018) struck down mandatory Aadhaar linkage for bank accounts as disproportionate.
- RBI KYC Master Directions treat “proof of possession of Aadhaar” as one of several Officially Valid Documents (OVDs). You can use passport, voter ID, driving licence, etc.
- Banks *can* use Aadhaar e-KYC voluntarily or when you specifically want Direct Benefit Transfer (DBT) subsidies under Section 7 of the Aadhaar Act.
- Refusing to open/operate an account or forcing biometrics solely because you decline Aadhaar (when other valid IDs are offered) is generally not permitted.
### Legal Position for Gas (LPG) Companies
- Aadhaar authentication/e-KYC is mainly linked to subsidies under PAHAL or Pradhan Mantri Ujjwala Yojana (PMUY) — these fall under Section 7 of the Aadhaar Act.
- The Ministry of Petroleum and Natural Gas has clarified (including in 2026) that biometric e-KYC is required primarily for unauthenticated consumers, especially those receiving subsidies. Supply of cylinders itself should not be stopped in many cases; the impact is more often on subsidy credit or domestic-rate pricing.
- For non-subsidy (full market-price) consumers, forcing biometric authentication or threatening disconnection has weaker legal backing and can conflict with the *Puttaswamy* limits.
- Recent pushes with deadlines (some extended into late August 2026) have led to aggressive practices by some distributors that may exceed official instructions.
### What You Can Do If Your Rights Are Being Violated
Document everything first: keep SMS messages, letters, emails, screenshots, and note dates, names of staff, and exact demands or denials of service.
1. Internal complaint (mandatory first step in most cases)
-
Banks: Written complaint to the branch manager / customer care / nodal officer / grievance redressal cell. Ask for a written reply within the prescribed time (usually 30 days).
-
LPG: Complain to your distributor in writing, then escalate to the oil marketing company (Indian Oil / BPCL / HPCL) customer care or grievance portal. Mention any threat of disconnection.
2. Escalate to regulators
-
Banks: File free of cost with the RBI Ombudsman via [cms.rbi.org.in](https://cms.rbi.org.in) (after 30 days or unsatisfactory reply). The Ombudsman can award compensation.
-
LPG: Escalate to the Ministry of Petroleum and Natural Gas or use CPGRAMS (pgportal.gov.in).
-
Aadhaar-specific issues: UIDAI helpline 1947, online grievance at myaa
dhaar.uidai.gov.in, or email help@uidai.gov.in.
3. Consumer protection route
File a complaint under the Consumer Protection Act before the District/State/National Consumer Disputes Redressal Commission for deficiency in service, unfair trade practice, or coercion. This is relatively accessible and can seek compensation and direction to restore service.
4. RTI applications
File RTI with the bank, oil company, or ministry seeking the specific circular/notification that supposedly makes Aadhaar/biometrics mandatory in your case. This often exposes overreach.
5. Court remedies (for serious or systemic violations)
-
Writ petition under Article 226 in the High Court seeking protection of fundamental rights (privacy, non-discrimination, access to essential services). Courts have previously restrained forced linkage and service denial.
-
In extreme cases involving privacy breaches or widespread harm, public interest litigation is possible.
6. Other practical steps
-
Offer alternative valid IDs clearly in writing.
-
For biometrics failing: Demand alternative authentication methods (OTP, iris, or offline verification) as required by UIDAI guidelines.
-
Lock your Aadhaar biometrics temporarily via the UIDAI website/app if you fear misuse (you can unlock later).
Important notes:
- Not every demand is illegal — subsidy-linked cases have stronger statutory backing. Context matters (are you a subsidy beneficiary? Have alternatives been offered?).
- Practices on the ground sometimes exceed what the law or official clarifications allow; documentation helps prove this.
- This is general information based on the Aadhaar Act, Supreme Court judgments, RBI directions, and recent government clarifications — it is not legal advice. For your specific situation, consult a lawyer or legal aid clinic, especially if service has already been denied or you face significant hardship.
You have enforceable rights. Starting with written internal complaints and regulator escalation is usually the fastest practical path, with courts available as a stronger backstop when needed.
Consumer protection for utility services in India is primarily governed by the Consumer Protection Act, 2019 (CPA 2019), which covers “services” broadly. This includes essential utilities such as LPG/gas supply, electricity, water, banking, telecom, and others when provided for a consideration (payment).
You are treated as a “consumer” if you hire or avail these services for personal use (not purely commercial purposes). Denial of service, forced unnecessary conditions (e.g., Aadhaar/biometrics beyond legal requirements), overcharging, delayed supply, poor quality, or unfair practices can amount to deficiency in service or unfair trade practice.
### Key Consumer Rights Relevant to Utilities
Under CPA 2019, you have rights to:
- Safety and quality of service
- Information (clear pricing, terms, reasons for any demand)
- Choice and access without arbitrary conditions
- Redressal of grievances
- Protection against unfair or restrictive trade practices
Specific sectoral rules strengthen this:
- LPG/Gas: Covered under CPA + Petroleum and Natural Gas Regulatory Board (PNGRB) frameworks and oil marketing company (OMC) citizen charters. Supply of domestic LPG is treated as an essential service.
- Electricity: Electricity Act 2003 + Electricity (Rights of Consumers) Rules, 2020 (standards of performance, timelines for connections, grievance forums).
- Water: State-specific laws + CPA (payment of charges makes it a “service”).
- Banking: Primarily RBI regulations + Banking Ombudsman, but CPA also applies for deficiency in service.