We do this in Canada too, and it works where the number of people you're trying to recognize is small. The "birthday paradox"* says that if you're comparing 23 people, you have a 50% chance of a match. You have to multiply this by the error rate (usually much less than 2%) of a facial match program to get the false-positive rate, but it's still huge.
The German federal security service tried out Siemen's facial matcher years ago, found it had a low error rate... and was completely useless!
When you had hundreds of criminals to look for in thousands of airport passengers a day, it was directing insane numbers of people to the "capture the terrorist" queue (;-))
--dave
[*https://en.wikipedia.org/wiki/Birthday_problem]
The criteria is "the company that has the power to demand the data, has to do so if ordered by their country's courts". This probably dates back to the 16th century or earlier. Some time around the Hanseatic League...
A Canadian company with data in Outer Mongolia has to produce the data if it can. If the Outer Mongols prohibit the Canadian company from demanding it normally, the Canadians can't be ordered to produce it, because the data isn't in the Canadian company's control. If they allow it to be demanded normally, a Canadian court can get it. They have to do it via the Mongolian branch, they can't just issue court orders in Mongolia.
Your suspicion is correct: a Canadian company that controls data in the U.S. can indeed be ordered by a Canadian court to produce it .
--dave
I was thinking about replacing the leaders, actually. Their party need to choose a new PM, real soon!
--dave
[How about the Pirate party?]
Diplomacy is the art of saying "nice doggy" until you can find a rock.