Gyms and malls scan fingerprints and faces at the door.

Weak regional laws leave residents’ data exposed to leaks, scams and unauthorized resale.

The EU’s General Data Protection Regulation requires consent before any such collection.

No regional law yet gives residents a clear right to delete old, abandoned accounts.

Sources: SMEX