A US court decision means Facebook could face a big damages claim over its use of facial recognition data.