Julian Hayes and Andrew Watson look at the legal framework around Facial Recognition Technology as set out in the Data Protection Act 2018.