>> but we need updated standards for how technology like facial recognition can be aligned with previous norms and laws

Can we just make personal data collection and sharing illegal? We got by before this was even possible.