It needs to identify an iris, not anything else about the owner of they iris.
That's not really a meaningful difference, though. It's still an identifier unique to you, and as soon as even a single company can correlate that identifier with any of your other identifiers, the game is over. Your iris now directly identifies you.