I wonder if EU data protection law has something to say about this, especially with the GDPR coming into force next May: http://www.bbc.co.uk/news/business-404

I wonder if EU data protection law has something to say about this, especially with the GDPR coming into force next May: http://www.bbc.co.uk/news/business-40441434 http://www.bbc.co.uk/news/business-40441434 "We can also demand to know how our data is being used and withdraw consent whenever we like." Combine that with the controversial "right to be forgotten", and I imagine that someone could successfully sue Facebook for lack of a "delete all", and for keeping images around on their servers after deletion.