The GDPR classifies personal data as anything that can be used as part of identification. Beyond the obvious name, phone number, and addresses, this also includes photos.
Article 4 of the GDPR, the data subject’s consent means…
“…any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”
I would be livid if someone took a photo of me and posted it online without my consent, and it could be construed as an illegal act. There may need to be a test case.
If you want to put your entire life online for the world to see, that is absolutely your right to do so. But you do not have the right to put other people's lives online without their consent, and that includes your children, as Gwyneth Paltrow found out!
Privacy has been hard won, and is part of human rights legislation. Please respect it. A country that dispenses with privacy is in a very worrying state.