That's true. But there isn't any advice that will work against such totalitarian practices and be legal at the same time. Either you circumvent the law with some VPN, or you relinquish your right to privacy.
The VPN route won't work with sites like Blue Sky, as they've already bent to the state so you won't have privacy there, even if your face or ID isn't in their database.