They consented to their data being used to verify their identity, not to train an AI on their data. Each separate purpose the data is being processed for needs its own basis.