Hacker News Reader

If you live in the EU, GDPR dictates that you own your data generally speaking. If you're in the US it varies by state if you have any rights at all.

If you own your face that doesn't mean nobody can take a picture on the street.

That is partly true, there are carve outs for public spaces. But what they can do with that image is still governed by the GDPR in the EU.