The data was not transmitted/processed/stored in this case! Privacy was not in any way impacted. So the question remains, how granular is a "new" use? Do you need to individually consent for every photo you take? Is it even possible for Europeans to consent to a class of actions? What scope is permissible and what isn't? These are seemingly unanswered questions.

GDPR advocates always assume that their own interpretation of the law is aligned with the court, but obviously we don't know that's the case until after the trial