Nearly two dozen states have passed laws regulating how tech companies collect data from our faces, eyes and voices. It comes as Congress has yet to pass any facial recognition technology.

Here's how it works. A face shot is submitted to a facial recognition system, which measures distinctive characteristics such as the width of nose and depth of eye sockets.