Quite a lot of this is in the GDPR: The right of [access,rectification,erasure,restricted processing,data portability] for personal data.
Personal data is defined as any information related to an identified or identifiable natural person, i.e. much wider than your identity. photos, health and probably also social graph fall under it.