Sam Altman’s latest eyeball-scanning initiative is attracting attention from data protection regulators.