AFP used PimEyes and FaceCheck.ID without permission

Thanks to The Guardian/Ariel Bogle's FOI request, we know that the Australian Federal Police used the website PimEyes and FaceCheck.ID regularly between the 1st of January and 4th of August 2023. These are sites where you upload a photo of someone and it tells you if images of that person exist elsewhere on the internet. It can then be used to identify someone or learn more about them. It's not surprising that the AFP would do this, I'm sure there's loads of people they'd love to identity, but the problem is nobody at the AFP or similar levels of law enforcement have reviewed these platforms to check if 1. it actually works and 2. what happens to the data uploaded. The AFP's leadership "was not aware of these uses until Guardian Australia's FOI request".