Image metadata can show the location of a person's home, workplace, or frequented places and can therefore be used to track their movements or profile their habits. Therefore, organizations that collect, store, or process metadata of photos must comply with the GDPR requirements and respect the rights and freedoms of the data subjects.