Yeah. Facial recognition by itself is fine, but let them be in hot water if they use it for identifying others.
It's similar to how GDPR and similar laws operate. Collecting the data is fine, but you'll get in trouble if you process & distribute that data without clearly notifying your users.
It's similar to how GDPR and similar laws operate. Collecting the data is fine, but you'll get in trouble if you process & distribute that data without clearly notifying your users.