Police must address concerns about facial recognition systems, the UK's privacy watchdog says.