Legal recourse for employer demanding biometric data?

Is there any legal recourse for employer demanding biometric data? Asking for a friend. His company is demanding biometric data from employees for server security. He's willing to get fired for noncompliance. He also, has some cash to hire a lawyer.