That&#x27;s fine, because simply a face is not at the moment considered to be personal data <i>and</i> there&#x27;s a general exemption for news reporting <i>and</i> livestreaming is not &#x27;data retention&#x27; (and I think not &#x27;data processing&#x27; either, for the purposes of the directive.<p>Maintaining a facial recognition database however is definitely not allowed without appropriate consent: <a href="http:&#x2F;&#x2F;www.theverge.com&#x2F;2013&#x2F;2&#x2F;7&#x2F;3964550&#x2F;facebook-deletes-european-facial-recognition-data" rel="nofollow">http:&#x2F;&#x2F;www.theverge.com&#x2F;2013&#x2F;2&#x2F;7&#x2F;3964550&#x2F;facebook-deletes-eu...</a>