Commercial Facial Recognition Apps too...
I wouldn't be surprised if police are doing the same with CCTV camera footage and standard commercial facial recognition apps, uploading images of 'friends' (potential suspects) to 'name' those in the CCTV stills/footage, and sort to content automatically.
This in itself should be an ICO investigation, because it's something is that is clearly possible with the technology available, so it's likely been used, and it's totally unregulated and unauthorised use of the technology, because of the potential for false-positives.
Why do these type of public disclosures always have to result in a complaint first, the potential compensation payments for this are massive.
Regulators need to start getting pre-emptive, so this doesn't happen in the first place.