On day one of my first year in high school me and basically every other students were given a few documents to sign. One of them included a clause that allowed the school to publish pictures of us doing activities on the school website. Back then I was not that privacy-conscious and my homeroom teacher pressured us to quickly sign all of them so I did. I don't remember anyone questioning the reasoning behind the clause.
After more than a decade past graduation, the school website appeared in my search results so I took a look. I found some pictures of me and some of them were embarrassing and/or really cringe. I would rather have them removed so I contacted the school and politely asked for the removal of about a dozen photos. They declined, citing the document that everyone signs.
Does the school really have rights to the photos for eternity? Does the CCPA or COPPA provide any protection for me in this case? Had I been an EU resident, could I have invoked GDPR and have the photos removed without hassle?