That is one of the reasons I wrote the post. I was completely unaware of the scanning that was required of my family. Also, there is no 'Privacy Policy' for park admissions (like for a website). They are not required to say what they will use the data for or how long they will keep it.