Vending machines that used face detection technology to track information about users on the University of Waterloo campus breached privacy rights. That's according ...