I'd prefer the law require opt-in consent for facial recognition, but would take a sign over nothing.

I agree, the least we should hope for is an informational warning with details of what data is being collected, like the agreements we click to sign with social networking sites that most people don't bother to read....