Why is a private entity able to use facial recognition software in the first place. I know doesn't have the equivilant of GDPR, but surely it has some level of privacy laws?
Why did the police think that was sufficient evidence to jail someone, especially when there wasn't any further collaborating evidence.