GDPR for Biometrics and Passwords