Anything you can legally opt-in to online is effectively complete freedom to companies. Nobody reads click-through agreements or terms of service. Sites will just add "and also we can collect your biometric info" to the terms, and people will keep clicking accept.

Without some very strong, EU-type rules around how you have to ask, it's just another thing lawyers will know to add to the terms.