The US doesn’t have specific federal privacy laws regarding biometric data, a gap that could create tension as OpenAI’s World expands in six US cities.