With no federal facial recognition law, states rush to fill void