Hardware Retailer Breached Law Using Facial Recognition on Customers (abc.net.au)

I don't understand how it is possible that they are allowed to collect and store video security footage, but they are not allowed to analyze it for people banned from the store.