I sometimes take pictures of clients for my own private use (education and analysis). In my Consent form, I explicitly state that any pictures I take won’t be used for anything public without the expressed written permission of the client. Another client, who was an attourney, said that this was redundant but still nice to have it spelled out explicitly.

People have to grant permission to use photographs. If you don’t have a signed Release, you can’t use it. The web has not changed this part of the law.