Photo consent: why having the photo is not enough