You absolutely can as an single individual, with that CMOS camera on your person. It's when we start using a networked database to store faces, this is when it should become unlawful IMO.
There's a big difference between a human brain and a vast 24/7 all-seeing database which can identify an individual out of millions of faces.