We've got a very similar scenario. Our daughter is nearly 6 now. She participated in some community events that ended up with her attributed photo on a local newspaper website (which I'm okay with-- we knew the "danger" when she wanted to participate in the events). Aside from that we've managed to keep attributed photos of her off the Internet. A couple of family members have posted photos of her but have been kind enough to avoid attribution.

(I do wonder how facial recognition will deal with ex post facto attribution of photos of children, given how our faces change as we age. Up to about age 4 my daughter was nearly indistinguishable from one of her cousins in photos-- a testament to the power of my wife's family's genetics, I guess...)