Surely this cannot be allowed as they are not filming for security purposes but are in essence selling on your personal data without your permission. I know it is not data as it is generally known but it is still your data. However we have no idea how else that data coudl eb used. Tesco have your card details which gives your address plus your photo? Luckily we do not use Tesco so not really an issue for us.
http://www.signal1.co.uk/on-air/breakfast/topics/tesco-advert-face-scanner/