So that's the concern? But GDPR solved this, just don't consent to them selling your likeness for AI training purposes.

Trusting untrustworthy companies aside, that doesn't resolve the issue of hacked facial recognition data.

Even back in 2014, malware was coming out that steals facial recognition data directly from smart phones themselves.

https://www.theregister.com/security/2024/02/15/stolen-ios-u...

The GDPR isn't a silver bullet.

Additionally - furtherance of facial recognition technology would impact travelling to foreign jurisdictions.

One of the most common ways foreign travellers get flagged when travelling internationally is for social media posts made under their own name that their destination country's government may not like. Traditionally if you've kept yourself pseudo-anonymous, you've largely been safe. But if we get to a point where pseudo-anonymous accounts are associated with pictures of people's faces, it will become significantly less pleasant to travel internationally for a lot more people.

You have way more trust for these companies actually following laws than I do