That’s not exactly what the law says. Video recording is ‘capturing biometric data’. It’s what you do with it that matters.
If a company uses face recognition to apply an internal ID to a customer, how are you going to know? There are legitimate use-cases for how this might be helpful for both sides. It’s when biometrics get attached to financial details that we start to have a problem.
Fingerprints and retinal scans are far different than facial characteristics. As said, you’re recorded the moment you leave the house, your face isn’t private - unless you wear a burqa.
Whatever