i dont know how you could make it illegal when it happens faster than laws can be put in place

it's a problem having your citizens retinas scanned by a foreign company but by the time its illegal those scans are done and the data stored somewhere

i guess it would even be possible to have that done by yourself on your mobile if they really wanted