Hi, my organisation are looking into deploying Windows Hello for Business, which uses biometrics for user authentication. Given this requires a legal basis under Article 9 of GDPR, can anyone point me in the direction of any Microsoft documentation in this regard? I was looking specifically for some mechanism to collect users' explicit consent but it does not seem to be an option in the default enrollment journey.