Biometric authentication tools may still be something of a Catch-22 for companies and their legal departments, even despite the effort of vendors to create tools that minimize the risk of exposure. It doesn't necessarily help the situation that biometric regulations such as Illinois' Biometric Information Privacy Act continue to unfold on a state-by-state level that offers no guarantee of uniformity in perception or enforcement.