“The Ryder Review (29 June 2022), commissioned by the institute, called for a new technologically neutral statutory framework for biometrics and a pause on public use of live facial recognition until it was in place.”