Employee Identity Rights Under Indian Law
During employee onboarding, corporate background screening (BGV) vendors and human resources departments routinely ask new hires to submit physical copies or scans of government-issued identity cards.
However, sharing an unredacted copy of your Aadhaar card poses long-term security threats to your personal financial identity. Under the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, private corporate employers are not authorized to demand or archive unmasked 12-digit Aadhaar cards.
The Legal Framework: UIDAI Circulars & DPDP Act
- Mandatory Acceptance of Masked Aadhaar: UIDAI has repeatedly clarified that all employers, IT corporations, and private firms must accept Masked Aadhaar where only the last four digits are visible.
- DPDP Act Obligations: India’s Digital Personal Data Protection (DPDP) Act imposes heavy penalties on corporate data fiduciaries that collect excessive personal identifiers beyond what is strictly required for employment verification.
- Storage Liability: Private HR systems are frequently targeted by ransomware and credential stuffers. Storing unmasked biometric documents creates severe corporate liability.
How to Protect Your Job Onboarding Documents
- Mask the First 8 Digits: Redact the initial 8 digits of your Aadhaar number, leaving only the final 4 digits visible for identification matching.
- Scramble the QR Code: The digital QR code contains your unmasked identity data in raw text format. Use MaskDoc’s offline mosaic tool to scramble it completely.
- Apply a Single-Use Employment Watermark: Stamp
FOR EMPLOYMENT VERIFICATION ONLY — [COMPANY NAME] — [DATE]diagonally across the card faces so the copy cannot be repurposed.