Are you sure about that? Do you have an example of someone getting prosecuted for posting security footage of someone breaking into their own home? Not a chance, whe there the footage is the front porch or the bathroom.
It's all about expectation of privacy. You are not protected from invasion of privacy in a public place, because there is no expectation of privacy there. And I expect a jury would also find that there is no expectation of privacy when you break into someones home and use the bathroom or steal their phone/camera and take it to your own home.
Expectation of privacy is an US concept, not universal law. It doesn't apply in the EU. Here you are protected from invasion of privacy in a public place.
The fact that you lump the EU into one statement seems to indicate that you don't really know what you are talking about. In the UK it is explicitly legal to take photographs of people in public places without their permission as long as the act can not be construed as harassment (which is similar here). But I don't know about the many other countries in the EU, I suspect they all have their own laws as well.
I'm talking about the EU Data Protection directives and the subsequence CJEU rulings (like [1]). Last time I checked, the UK was still part of the EU.
And I'm not saying you can't take photographs in public places. What I'm saying is that the binary concept of "expectation of privacy" doesn't apply in the EU. Even in the street there are some protections, such as from CCTVs [2]:
This means that cameras attached to a private individual’s home may, in certain circumstances, no longer be exempt from the requirements of the DPA under section 36. Those circumstances are likely to include where the camera monitors any area beyond the interior and exterior limits of that individual’s home. This would include any camera to the extent that it covered, even partially, a public space such as the pavement or street. (...)
If you have set up a live streaming camera available to the public so that they can, for example, assess which route to take on their journey to work based on the level of congestion, you should ensure that it is appropriately zoomed out so that individuals cannot be identified. If individuals can be identified then this will need to be justified and shown to be necessary and proportionate.
