Quick search brings up this.
“ If you took the photo, you usually own it. But, if you didn’t take the photo but you are in it, someone could breach your rights (such as data protection or privacy rights) by posting it.”
I’ll bring it up at GP.
Whatever the legalities, it’s highly intrusive (as well as being a bit odd). Most people, I suspect, would accept that the club has the right to publish their own images – as long as they have all photography waiver notices for crowd events displayed around the ground or printed on tickets (or whatever legal stuff they need to fulfil). But a private individual taking this type of photo and publishing feels like a different thing – a little bit unsettling. The privacy issue: If I had children published in an image in this fashion I would not be happy.