‘Regulation gap’ for facial recognition technology, law expert says