The EU is implementing a blanket ban on facial recognition surveillance by police – but the UK is ploughing ahead despite privacy fears