Technology: Facial recognition is on the rise – but the law is lagging a long way behind