The doorman isn’t dumping a log of your comings and goings as well as who entered or exited with you into an unsecured s3 bucket in the cloud.
The solution is harsh penalties for negligence or willful misuse of customer data - not banning the technology imo.
Well since the solution (in the form of those laws) doesn't exist yet, the technology shouldn't be usable until it does.