Should it be allowed / legal to 'tag' people that are not part of a service?

I might agree that 'celebrities' and leaders of larger organizations are 'public figures' and thus if there's a reasonable public interest it should be allowed to tag them, probably with a publishing delay for security.

However individuals? Random citizens who aren't part of a platform and cannot manage their data? IMO the default should be deny data collection and do not profile.