Any organisation using software that can recognise a face amongst a crowd then scan large databases of people to check for a match in a matter of seconds, is processing personal data.
Link: Blog: Live facial recognition technology – data protection law applies
Source: ICO .org.uk
