The controversial face recognition company was just fined $10m for scraping UK faces from the web. That might not be the end of it.