What the Law Actually Says
Hotels in India are legally required to verify the identity of their guests. This is a standard security measure. However, no law specifies that Aadhaar is the only acceptable form of identification. The Supreme Court of India, in its landmark 2018 judgment,
struck down Section 57 of the Aadhaar Act, which had allowed private entities to demand Aadhaar for verification. This means private companies, including hotels, cannot compel you to provide your Aadhaar number. Any government-issued photo ID with an address, such as a Passport, Driver's Licence, or Voter ID card, is a legally valid document for hotel check-ins. Many hotels explicitly list these alternatives in their policies.
The Unique Risks of Sharing Your Aadhaar
Unlike other identity cards, Aadhaar is a unique 12-digit number linked to your biometric data, including fingerprints and iris scans. Handing over a photocopy or even the original card exposes this sensitive information. Once a hotel has a copy, you have little control over how that data is stored or who can access it. Stacks of physical Aadhaar copies are vulnerable to theft and misuse. This data can be used for identity theft, opening fraudulent accounts, or other criminal activities. The Unique Identification Authority of India (UIDAI) itself has repeatedly cautioned the public against sharing photocopies of their Aadhaar with unlicensed private entities like hotels.
UIDAI’s Official Stance and New Rules
UIDAI has been actively working to curb the practice of collecting Aadhaar photocopies. It has stated that it is an offence under the Aadhaar Act 2016 for unlicensed entities like hotels to collect or keep copies of Aadhaar cards. To address this, UIDAI is introducing new regulations that require entities like hotels to register as an 'Offline Verification Seeking Entity' (OVSE). Once registered, they must use secure digital methods for verification, such as scanning a QR code on the mAadhaar app, instead of taking physical copies. This shift is designed to protect user privacy and prevent data leaks.
Your Rights at the Check-In Desk
When a hotel asks for your Aadhaar, you have the right to offer an alternative government-issued ID. Politely but firmly state that you prefer to use your Driver's Licence, Voter ID, or Passport. If the staff insists on Aadhaar, you can inform them that it is not mandatory for private services. Another secure option is to use a 'Masked Aadhaar', which can be downloaded from the UIDAI website. A Masked Aadhaar displays only the last four digits of your Aadhaar number, concealing the full number and reducing the risk of misuse if you must provide a copy. Recently launched Aadhaar apps also allow for verification via a QR code, which shares limited information with the hotel, enhancing your privacy.
Why Do Hotels Insist on Aadhaar?
Despite the rules, why does this practice persist? Often, it stems from a lack of awareness among hotel staff about the legal nuances. For them, Aadhaar is a quick and seemingly comprehensive form of ID. Some hotels may also use third-party software that defaults to Aadhaar-based eKYC for faster check-ins, even though these systems should legally accept other IDs as well. However, convenience for the hotel should not come at the cost of your data security. The onus is on hotels to train their staff and update their systems to comply with the law and respect guest privacy, especially as UIDAI pushes for a complete ban on collecting photocopies.
