@highondancer It’s a big deal because:
(a) People don’t know that their photo is being taken and that facial recognition is being run, etc. If this was happening in the EU, it would run foul of GDPR.
(b) The owner of a shop does not have the means to take photo of customers and store it indefinitely and link it to other info with just their eyes/biological facilities
(c) The difference to being asked is they were never asked – they didn’t even know it was going on.