Can you give me references for thie queston While current laws like the GDPR and the California Consumer Privacy Act (CCPA) address some aspects of biometric data protection, there are gaps. These may include insufficient regulation of emerging technologies, lack of clarity on ownership of biometric data in the metaverse, inadequate enforcement mechanisms, the need for international cooperation on standards, and the challenge of keeping pace with rapid technological advancements in biometric psychography