Image and Photo Consent Spain (Consentimiento de Imagen y Fotografía)

An Image and Photo Consent Spain (Consentimiento de Imagen y Fotografía) is a written authorisation document grounded in Ley Orgánica 1/1982, de 5 de mayo, de Protección Civil del Derecho al Honor, a la Intimidad Personal y Familiar y a la Propia Imagen (LO 1/1982), which protects the fundamental constitutional right to one's own image (derecho a la propia imagen) guaranteed by Article 18.1 of the Constitución Española 1978. The right to one's own image means that every natural person has the exclusive power to decide how their image is captured, reproduced, and published — any capture or publication of a person's identifiable image without their consent constitutes an unlawful interference (intromisión ilegítima) under Article 7.5 LO 1/1982, unless a statutory exception applies.

Article 2.2 LO 1/1982 establishes that the right to one's own image may be limited by the person's own consent — provided that consent is express, free, and informed. Article 2.3 provides that consent is revocable at any time by the person who granted it, with the obligation to compensate the recipient of the consent for damages caused by the revocation. These two provisions form the core legal basis for an image consent form in Spain — the form both authorises the use of the image and documents the limits of that authorisation.

Image and photograph data constitute personal data under Article 4(1) of Reglamento (UE) 2016/679 (RGPD — Reglamento General de Protección de Datos) when the images can identify or make identifiable a natural person. Processing of such data therefore requires compliance with RGPD — including a valid legal basis under Article 6 RGPD (typically consent under Article 6.1(a) for voluntary image authorisations), the information obligations of Article 13 RGPD, the storage limitation principle of Article 5.1(e) RGPD, and the data subject rights of Articles 15 through 21 RGPD. Ley Orgánica 3/2018 (LOPDGDD) complements and specifies RGPD in Spain, with the Agencia Española de Protección de Datos (AEPD) as the supervisory authority.

For biometric data — facial recognition images and templates derived from photographs — Article 9 RGPD applies, classifying biometric data processed for the purpose of uniquely identifying a natural person as special category data (datos de categoría especial) requiring explicit consent (consentimiento explícito) under Article 9.2(a) RGPD. The AEPD has issued specific guidance (Guía sobre tratamientos de control de presencia mediante sistemas biométricos, 2020) setting strict conditions for facial recognition and biometric time-attendance systems in workplaces.

For photographs taken in public spaces (espacios públicos), the legal position in Spain reflects the interplay between LO 1/1982 and freedom of expression (libertad de expresión) under Article 20.1(d) Constitución Española. Article 8.2 LO 1/1982 provides that photographing, filming, or capturing the image of public figures (personas con proyección pública) in places open to the public when they are performing their public functions does not require their consent. However, even public figures retain a protected private sphere — the Tribunal Supremo and the Tribunal Constitucional have recognised that capturing a public figure in genuinely private contexts (on private property, with family) remains an unlawful interference under LO 1/1982 regardless of any public interest argument.

In commercial and advertising contexts, the right to one's own image has specific commercial value — the Spanish Tribunal Supremo has recognised a patrimonial dimension (dimensión patrimonial del derecho a la imagen) separate from the privacy dimension, meaning that the commercial exploitation of a person's image without consent may give rise to both the civil remedies of LO 1/1982 and claims in unjust enrichment (enriquecimiento injusto) under Código Civil Article 1901.

An Image and Photo Consent Form Spain is needed whenever a photographer, filmmaker, business, school, event organiser, or media organisation wishes to photograph or film identifiable individuals and to use, publish, or distribute those images in circumstances that require the consent of the person depicted.

A Consentimiento de Imagen is needed when a professional photographer (fotógrafo profesional) or studio takes portraits, headshots, or editorial photographs of clients or models for commercial use — including advertising campaigns, product packaging, social media content, and corporate communications — where the images will identify the individual depicted.

An Image Consent Form is needed when a company photographs or films its employees for use in corporate marketing materials, annual reports, website staff pages, or social media profiles — Article 89 LOPDGDD and AEPD guidance confirm that employee photographs on company websites constitute personal data processing requiring a valid legal basis. Consent is the appropriate basis where the use is not strictly necessary for the employment relationship.

A Consentimiento de Imagen y Fotografía is needed when a school, university, or educational institution photographs or films students for use in school prospectuses, yearbooks, websites, or press releases — recording images of minors requires written consent from the padre, madre, or tutor legal under Article 7 LOPDGDD and LOPJM Article 4, regardless of the minor's own agreement.

An Image and Photo Consent Form is needed for event organisers (conferencias, ferias, bodas, eventos deportivos) who intend to hire a photographer or videographer to capture images of attendees and subsequently publish or distribute those images on social media, websites, or in press releases. While general crowd shots of public events may qualify for the Article 8.2 LO 1/1982 exception, close-up or clearly identifiable images of individual attendees require prior consent.

A Consentimiento de Imagen is needed in healthcare settings when a medical or dental professional wishes to photograph a patient's condition for clinical records, educational use in medical journals or conferences, or publication in research papers — patient photographs involve health data (datos de salud — special category data under Article 9 RGPD) requiring explicit consent (consentimiento explícito) under Article 9.2(a) RGPD.

An Image Consent Form is needed for social media influencers, content creators, and YouTubers in Spain who photograph or film other individuals as part of their content — publishing identifiable images of others on Instagram, TikTok, YouTube, or similar platforms without their consent may constitute an unlawful interference under LO 1/1982 and a RGPD violation, with the AEPD having jurisdiction over Spanish-resident data subjects regardless of the platform's country of establishment.

A Consentimiento de Imagen y Fotografía is needed for real estate agencies (agencias inmobiliarias) photographing residential properties where identifiable personal effects or family photographs of the occupants are visible in the images — the occupants' consent may be required under RGPD if the published photographs would allow identification of the property's residents.

A legally valid Image and Photo Consent Form Spain under Ley Orgánica 1/1982 and Reglamento (UE) 2016/679 must contain the following elements to constitute an effective authorisation and to satisfy the documentation requirements of Article 7(1) RGPD.

Identification of the Photographer or Organisation (Responsable del Tratamiento): Full legal name, NIF/CIF, registered address, and RGPD contact details of the person or organisation taking and processing the images. Where a Delegado de Protección de Datos (DPD) is required under Article 37 RGPD, the DPD's contact details must be included. The AEPD's Registro de Actividades de Tratamiento must include this processing activity.

Identification of the Subject: Full name and DNI/NIE of the individual depicted, or — for minors — the name and DNI of the parent or legal guardian, together with the minor's name and date of birth. The form must state that consent is given freely, specifically, informedly, and unambiguously, satisfying Article 4(11) RGPD. For models and actors, the consenting person's professional name (nombre artístico) should also be recorded.

Description of the Photography or Filming Session: Specific details of the session including date, location, nature of the session (portrait photography, corporate event, advertising shoot, educational recording), and the general type of images to be taken. Broad blanket authorisations for 'any photographs taken at any time' are inconsistent with the RGPD specificity requirement and may be challenged as insufficiently informed consent under LO 1/1982 Article 2.

Scope of Authorised Use (Usos Autorizados): A precise statement of the purposes for which the images may be used — advertising, editorial publication, social media, website, internal corporate communications, medical records, educational materials. The form must distinguish between uses that are authorised and those that are not — for example, consent for corporate website use does not automatically authorise commercial advertising use. Each separate use should be independently identified and authorised.

Geographic and Temporal Scope: The territorial scope of the authorisation (Spain only, European Union, worldwide) and the duration for which images may be used — whether the authorisation is for a specific campaign period, indefinitely, or until revoked. Indefinite authorisation for commercial use is common in advertising contracts but must be clearly stated and freely accepted. Time-limited authorisations provide greater protection for the subject.

Media and Channels: The specific media in which images may be published or distributed — print (prensa escrita, carteles publicitarios, catálogos), digital (website, social media platforms — Instagram, Facebook, LinkedIn, TikTok, YouTube), broadcast television, internal company materials, or any combination. The consent form must list the specific platforms authorised to avoid subsequent disputes about scope.

Commercial or Non-Commercial Nature: Whether the use of the images is commercial (comercial) — for advertising, product promotion, paid publications — or non-commercial (no comercial) — editorial journalism, educational, non-profit. Commercial use of a person's image has a patrimonial dimension under Spanish Tribunal Supremo jurisprudence — adequate remuneration or a clear statement that no remuneration is provided must be included to avoid unjust enrichment claims under Código Civil Article 1901.

Data Protection Information (Cláusula RGPD): A full Article 13 RGPD information notice covering: controller identity; processing purpose and legal basis (consent under Article 6.1(a) RGPD); retention period; recipients and international transfers; and data subject rights (access, rectification, erasure, restriction, portability, objection). The right to withdraw consent at any time under Article 7.3 RGPD and the right to lodge a complaint with the AEPD at aepd.es must be included.

Right of Revocation: Both LO 1/1982 Article 2.3 and RGPD Article 7.3 confirm that consent may be withdrawn at any time. The consent form must specify: the mechanism for revocation (written notice to the responsable del tratamiento, email address); the timeframe within which the controller will remove published images after revocation; and the consequences of revocation — particularly whether previously printed or distributed materials can be recalled, and whether partial revocation (e.g., removing digital but not print use) is possible.

Special Provisions for Minors: Where the subject is a minor under 14 years of age, the form must be signed by the padre, madre, or tutor legal, as minors lack legal capacity to consent under LOPDGDD Article 7. For minors aged 14 to 17, both the minor's signature and parental co-signature are recommended. The form should state the minor's right to revoke consent upon reaching majority.

Forms-legal.com provides this Image and Photo Consent Form Spain template as a practical drafting tool. Commercial image authorisations and authorisations involving health data or special category data should be reviewed by a qualified abogado or certified Delegado de Protección de Datos to verify RGPD compliance before images are published or distributed.