Companies can’t ask for Aadhaar anymore—or can they?