Depends what the ever-changing requirements for "upfront" are - it's fairly clearly(?)[0] called out in Facebook's data policy that they use facial recognition and how to change your settings.

What about a picture I took myself of a public place in Chicago with people's faces in it? Those are certainly my bits.

[0] https://www.facebook.com/about/privacy/update