Facial recognition may need regulating