There’s going to be legislation. That’s more or less a given at this point. The question is: can we actually get good legislation? My fear is that we’ll get something more along the lines of the EU cookie directive than a full-on GDPR.

So instead of worrying that your biometric data could be captured anywhere and used for anything without your knowledge, you now have to click “I accept” before engaging in any activity with a business or government entity, which then establishes your consent to your biometric data being captured anywhere and used for anything without your knowledge.