When the FBI and DHS fusion centers started building vast, unregulated, facial recognition databases, they shrugged elaborately and said that there weren’t any standard protections for doing so, and that they were just experimenting, and it wasn’t going to be used operationally until the legalities were all sorted out.