This change aligns with the Aadhaar Act, which bars organisations from collecting, using or storing a person’s Aadhaar number or biometric data for any kind of offline verification