No need for conspiracy here. I'd be surprised at this point if McDonald's wasn't running that type of software on all their cameras 24/7 and using to better profile their customers. Is there actually a law against it? There should be, but is there? It likely isn't hard and I am positive the data could be useful to them in many ways so if they aren't then it would only be because they thought it wasn't legal.