They should only scan trouble makers after they make trouble. Any face scans on entry should be checking against the trouble maker database then not save anything unless there is a hit. They should not default to saving everyones data.