I suppose a company asking for a fingerprint is just like asking for a DNA sample. Who knows who'll get hold of that database in the future.
The company has an obligation to keep the information private and secure.
As an example of this obligation:
I have an extremely elaborate security camera network which includes about 10 cameras outside the group of premises that I own. They cover a large area of public space as well. I regularly get requests from the public to view footage.
I decline all requests and direct them to the police who can view the footage if they see the need.
Organisations that spend money to have these systems know their obligations and take them seriously.