Facial recognition has to be regulated to protect the public, says AI report