Biometric Data Privacy: Legal Risks of Facial Recognition Tech