ID scans raise privacy fears