The second question I get after "does it work" is "is this watching us." If you do not have a clear answer, people will cover the lens with tape.
I collect product photos, not faces. I drop frames that look like people. I do not store video. I do not put cameras in break rooms. The shutter is user-initiated.
Write it down
A one-page policy beats a vibe. What is stored, how long, who can see it, how to request deletion. Leads should be able to explain it without calling me.
If a photo accidentally includes a person, there should be a delete path that actually deletes, including backups you forgot you had.
Purpose limitation is a feature
The same images should not quietly become an attendance system next quarter. Once people believe that is the roadmap, the lookup app is dead even if the code is fine.
