The next question is since this database is not exact binary hashes, but an ill defined "perceptual hash" - how many false positive images has this system surreptitiously extracted from customer hardware and shown to presumably human control personnel? Were these customers notified? What is the recourse for them?

PhotoDNA has been around for a while and you might think about it what you want, but they have never answered those very pertinent questions.