Hardware Retailer Breached Law Using Facial Recognition on Customers

I don't understand how it is possible that they are allowed to collect and store video security footage, but they are not allowed to analyze it for people banned from the store.