I'd guess fingerprinting without consent is also illegal under these regulations, but may be harder to persecute.