Why let facts ruin the story
From the CNBC article it seems like CX don't have recording capability anyway within the IFE so (if this is correct) the IFE video recording issue is a moot point. Potential concern with the other IFE analytics captured, but only if this isn't anonymised.
As for the CCTV; given the numerous accounts on pprune about harrasment / assault etc on CC, surely this is positive thing?
The data governance is a very valid question, but why give particular attention to airlines? This is surely a much broader issue that should also be asked of other public transport operators, airports, shopping centres, car parks etc... I'm sure all have similar issues with data security and use.
Singling out an airline smells like scaremongering to me