A U.K. office in charge of protecting information rights has fined a facial recognition company from the United States for exploiting photos of individuals in the U.K. and elsewhere to construct without their consent a worldwide online database that could potentially be used to monitor people or sold to other companies.