No, it wouldn't create a problem with the Privacy Act, because the Privacy Act is not written in absolute terms. It's not like the Access to Information Act. Again you come back to asking whether you need a photo. Quebec has gone that way and asks for photo ID.
On June 14th, 2006. See this statement in context.