Plan for massive facial recognition database sparks privacy concerns