Broadly speaking, you don't have a right to privacy having your photo taken in the US. Is this a fourth amendment violation? I don't know. What is the difference between a face scan and a photo? More detail and accuracy is going to require close range facial depth mapping via infrared, versus facial recognition using photos or live video feeds.