what is the legal aspect of a company holding bio-metric data ? In age when the government is debating compulsory ID cards etc (not to mention losing data with frightening regularity ) are there not any rules as to how private companies can handle biometric data ..

.. are there no restrictions as to what biometric data your employer can hold about you .. or indeed can they insist you supply it ?!