Earlier quoted context omitted.
> Not sure how this relates to GDPR GDPR states that the lawful basis for processing of data depends, among other things, on: * the individual's explicit consent to the processing of his or her personal data. * protecting the vital interests of a data subject or another individual This violates both criteria, thus is indirect violation of the GDPR.
* Face is not considered personal data AFAIK * What the heck is vital interest ? For person playing in a movie it may as well be that everybody watch it.
* Screwing up someone's life, as it is extensively desribed in the article, fits well into the definition of "vital interest".
I find it quite baffling how someone posting on HN is oblivious to the link between GDPR and the need to punish those who abuse data collected from social networks against the wishes and best interests of the users to screw up their lives.