GDPR puts the picture of a person under special protection. They need to ask for your permission if they want to store and process it. Additionally they are required to provide to you a copy of all information they have stored about you. Probably they claim that they deleted the pictures after they completed the training of their neuronal networks. I'd watch court proceedings, that try to figure out if the auto-encoded version of a picture still is under GDPR protection.
> I'd watch court proceedings, that try to figure out if the auto-encoded version of a picture still is under GDPR protection.
That’d be a fascinating case!
If these were people rather than computers, I don’t think you could ask them to forget a face. But they could be asked to destroy notes or derived work.