Regulatory capture of facial recognition technology might be a successful tactic - it certainly worked in Oracle's favor with government certified databases.