Compliance and litigation defense strategies for companies using biometric information