>Google had violated a state consumer protection law that requires companies to inform citizens and get their consent before capturing their biometric identifiers, including fingerprints, voiceprints and a “record of hand or face geometry.”

The law in question:

https://archive.ph/w9gtb

It's going to be an interesting case because it can easily be argued that Google captured nothing; they ran post-capture analysis on data captured by individuals for private use.

Whether that's relevant to the law is what the courts will have to decide.