Regulatory Compliance and Legal Risks in the Use of Biometric Data for Financial Authentication