Actually yes, there is something you can do about it. Earlier this year some rather strong laws were activated ( became law before COVID but we're deferred to earlier this year). Similar to GDPR (PDPA).
Look. I wouldn't stress to much about it. Thailand has a very different attitude to privacy.
It shouldn't have happened. Hopefully they'll learn from it.
I often use photos of clients all the time. I always talk to them about using the pics for promotion and so far no issues.