The GP's link is helps define it. Apparently on second access it becomes paywalled, but the gist is photos become personal information when "specific technical

The GP's link is helps define it. Apparently on second access it becomes paywalled, but the gist is photos become personal information when "specific technical means" are used to identify individuals. I think Instagram's suggested tags etc would count, so presumably they'll have to turn that off in the EU. However, I think your vacay photo snapping is safe because you're an individual. From https://www.itgovernance.eu/blog/en/does-the-gdpr-apply-to-me https://www.itgovernance.eu/blog/en/does-the-gdpr-apply-to-m... > To fall within the remit of the GDPR, the processing has to be part of an “enterprise”.