@CitizenJoe: I think I see what you're saying about the GSR. But I didn't see anywhere where the finger print/DNA/retinal information is passed back to the SIN Reader (if I did, let me know where and I'll address it. If it's in SR5, let me know too). In order to get that data one would have to hack the host that is storing it.
So in your example, walk by the CEO, grab their SIN and pass that through a basic SIN Verification system which would come up with a name, address/national-corporate citizenship, physical description/photo/holopic. Now the runner(s) can make a disguise to try and look like the CEO, but no fingerprints, retinal print, or DNA. But they have to get the basic SIN Verification...if they go for legal 1-2 rating, well, watch out for a glitch or critical glitch (GOD's alerted
Or, walk by CEO, grab their SIN, pass that that through expert SIN Verification system...at which point the system's hand reader, retinal scanner, and/or blood/saliva sampler now asks the runners to supply a hand, eye, and/or fluid to check against the databases. If nothing is fed into the system...no check can be made. If the runners are able to supply the requisite material...then it's still a pass/fail/unreadable check.
Or, walk by CEO, grab their SIN, then hack into the GSINR database, find the heavily encrypted files of the CEO in the system, break the encryption, copy the files, get out alive, acquire a good cellular glove molder and retinal duplication contacts, make the appropriate skill checks to make them work, find someone with matching physical traits, make a disguise to match, hope the CEO's security detail doesn't regularly have mage's assense the aura, succeed on acting skill checks, get the keys to the kingdom...only to bump into the CEO in their office, or run into his persona in the company's host, or have the disguise slapped off the runners face by one of the CEO's angry lovers.
All make for good Shadowruns.
And (in response to your post in the Rules forum SIN thread) awesome-thanks for the permits/legality first appearing in Shadowtech! I was so focused on nationality that it would have been years before my brain made the switch to "permits are for
gear"! So thank you, thank you!
As for the threatening GMs and the drops of blood at the crime scene. Yeah. I warn my players that databases build up if they leave a lot of evidence behind and if they do I'll use that to complicate their lives. But throwing the PCs in jail kind of makes my roll moot...unless I want to run "Oz - The RPG"...which I don't. I go with common sense. My mage character cast some spells in a shootout against Vory in a nice downtown Seattle restaurant...so he spent about 30 seconds once the Vory were dealt with to the clean the astral of the lingering auras. Last game, our Street Sam took a couple heavy physical-damage hits from a combat axe...but it was in Chicago's CZ, so eh. Big deal about the blood. The GM could still use it against us, if he wants. But I trust the GM to make it a fun ride.