I'm not certain that GLB Privacy rules would be applicable based on publishing a picture. I do know that anytime we have used a consumers picture we have always obtained a release in advance. Whether that is done under some marketing rule, as a result of litigation and a best practice or simply because it is necessary due to an implied endorsement, it is the way we have always done it. Not a good answer, but the best I have at the moment.
If nothing else, it is a courtesy and saves you from having a complaint later that the consumer objects to this.
------------------
Andy Zavoina
Opinions stated are not necessarily that of my employer.