Earlier quoted context omitted.
This is still not fully supported by law. It is becoming normalized indeed, especially by the current admin. Let's hope this is not going to become widely used or that it doesn't stay permanently, eg. it gets at least restricted to some type of crime by future administrations.
Not supported by law where? I’m unaware of any legal proscription of this practice in the USA, and the Journal article makes no such claims, either. (IAAL but this is not my primary field of expertise, and this is not legal advice.)
Using facial recognition on people without their consent is illegal in a growing number of states.
Facebook lost a class-action lawsuit about this and I (and many other people) got a check for a little under $500.