The U.K. data watchdog warns that sharing images of shoplifters online or in store windows may violate their rights under GDPR laws.