Copyright and data protection are separate issues and even so, FADP doesn't let people off that easily. From the same article 4: > Personal data may only be pr

Copyright and data protection are separate issues and even so, FADP doesn't let people off that easily. From the same article 4: > Personal data may only be processed for the purpose indicated at the time of collection, that is evident from the circumstances, or that is provided for by law. > The collection of personal data and in particular the purpose of its processing must be evident to the data subject. Note that it adds the qualifier "for the purpose indicated at the time of collection". I don't think there's a realistic argument that Facebook's UI indicates or makes evident, at time of uploading/posting a photo, that the photo can be used by third parties performing facial recognition. And then, even if you give Facebook consent to do certain things, that consent does not extend to third parties scraping it.