Assurances over US biometric data