Demographic bias gaps are closing in face recognition, but how training images are sourced is becoming the field’s biggest privacy fight.