Allowing employees access to buildings and data by scanning their hand, face or eyes can be seamless and secure. But HR must be aware of the legal and regulatory risks.