Hmm good point. Biometric data includes face recognition. That'd be interesting to understand in what circumstances they consider this information as lawfully acquired.