Portland recently banned facial recognition to protect its citizens’ privacy, and businesses and government agencies caught using the technology face hefty fines.

Facial recognition on such a large scale isn’t comparable to FaceID on your iPhone. Instead, it could be used to track your whereabouts or identify previously convicted shoplifters before they commit a new crime. It’s even worse if you’re non-white: Amazon’s Rekognition, for example, is more likely to identify people with darker skin as people who have previously been arrested for a crime. Is it any wonder the tech giant spent $24,000 lobbying against the bill?

“I think many people are probably unaware of the inadequate measures that government agencies and their contractors have taken to secure this extremely sensitive information,” Nathan Sheard, deputy director of community organizing for the Electronic Frontier Foundation (EFF), told Lifewire via email. “Many are unaware that [U.S. Customs and Border Protection] contractors alone have allowed license plate and facial data of over 100,000 individuals to be compromised.”

It’s not just border patrol that’s using automated facial recognition (AFR). It’s also being used in stores to identify known shoplifters, at airports to automate immigration and passport checks, for season ticket holders to skip the lines at sporting events, to track school attendance, and even to prevent toilet paper theft in Chinese public toilets.