Facial recognition tech needs immediate regulation, says privacy watchdog