Collecting Biometric Data Without Consent is Sufficient Harm to Base an Action