Yes. Collecting and using personal bank information in any way without the individual’s written consent is illegal. If you want to use direct deposit, you will need your employees to sign an authorization form. Until they sign one, you’ll have to keep giving them paper checks.