Depends on the state and city, there's no federal law. Madison Square Garden (notoriously) use facial recognition to ban all lawyers from their venue who work at firms engaged in active litigation against them. This was upheld in May [1][2] since in NYC you can collect biometric data for commercial use without consent as long as it's signposted and you're not selling the data [3].
[1] https://law.justia.com/cases/federal/district-courts/new-yor...
[2] https://news.bloomberglaw.com/litigation/madison-square-gard...
[3] https://codelibrary.amlegal.com/codes/newyorkcity/latest/NYC...