Microsoft has acknowledged that facial recognition technology, common in devices as a means of authentication should be regulated.