The UK biometrics commissioner has warned that policing and justice bodies must be able to demonstrate “immediately and unequivocally” that their cloud deployments are lawful, especially given the sheer volume of sensitive biometric information being moved onto cloud infrastructure owned by US companies