In most countries it is legal unless the person photographed takes less than 13% of the whole photografy. Also it is legal when it is a crowd, but "crowd" isn't precisely defined. So if somebody is more less 13% of your photo it's ok. There might be some problems if the person photographed has his/her business card or id visible with his/her personal data.