Facial recognition push 'potentially breaches privacy laws'