In most states, yes. A handful of states, including Illinois, have specific biometric privacy laws that may require written notice or employee consent before you start collecting facial recognition data. Check your state’s requirements or your legal counsel before enrolling employees.