Yes. Part of the problem with the technology is that, if there's not an explicit opt-in requirement, you're not even necessarily aware that you're being subjected to the technology. For example, with the customs screening mechanisms they have at Pearson, from the traveller's experience, you don't necessarily realize that a facial recognition scan is happening. There is no explicit obligation to get your consent. That's equally problematic. In the U.S., we saw examples where there was an obligation to provide an opt-out, but the signs were hidden in the corner. People didn't see them very well.
I would say that requiring, at the very least, an opt-out with very clear notification, and perhaps even an opt-in, would be a useful addition.