Laws have non-binary options - for example, most countries have laws controlling industrial-scale air pollution which do not prevent you from grilling at home.

In this case, I think it would be interesting to think about the most concerning area: linking a person in a photo to their real-world identity. It seems like there could be restrictions on how face-recognition databases are built and accessed, possibly incorporating intent to harass or intimidate as an aggravating factor, and possibly linking across time and place. If I take a picture of some guys playing basketball or chess as I walk around town, I don’t need to identify them in my art exhibit entry and I certainly don’t need to link one of them to a different time and place without their permission.