Facial recognition is special personal information under Popia, prohibited unless the police can find an exception.