What prevents a private company (ex. Clearview) from using Rekognition to accomplish the same thing for the police as a government-contractor? Without any kind

What prevents a private company (ex. Clearview) from using Rekognition to accomplish the same thing for the police as a government-contractor? Without any kinds of laws, wouldn’t things like this incentivize new niches to popup to milk money from the government?