Photo Consent Form (UK)

A Photo Consent Form in the United Kingdom gives written permission for a specific act and records the scope and limits of the consent provided, under the framework of UK GDPR and Data Protection Act 2018.

The UK GDPR came into effect in January 2021, incorporating the EU GDPR into domestic UK law with modifications following Brexit. Under the UK GDPR, any organisation that processes personal data must have a lawful basis for doing so. For photography involving identifiable individuals — particularly in non-public, professional, or commercial settings — consent under Article 6(1)(a) is typically the most appropriate and transparent lawful basis. Consent must be freely given, specific, informed, and unambiguous.

A photo consent form serves multiple purposes. It satisfies the UK GDPR's transparency requirements by informing the subject about who is taking the photographs, for what purpose they will be used, how long they will be retained, and with whom they may be shared. It creates a record of the consent given, which the organisation can produce if challenged. It specifies the scope of consent — the purposes for which images may be used — and confirms that the subject understands they can withdraw consent at any time.

For photographs of children, the form is completed by a parent or guardian. Schools, sports clubs, youth organisations, and any entity working with children should have strong photo consent processes in place. The Information Commissioner's Office (ICO) and the NSPCC publish guidance specifically addressing photography involving children.

For commercial photography — including marketing materials, advertising, editorial content, and social media — a more detailed consent form (sometimes called a model release) may be required, specifying the commercial uses to which the images will be put and any remuneration payable.

The legal framework governing the Photo Consent Form (UK) in United Kingdom draws on several key statutes and regulatory bodies. Under UK law, the UK GDPR and Data Protection Act 2018 govern personal data in this document. The Consumer Rights Act 2015 protects individuals in consumer transactions. Section 62 of the Consumer Rights Act 2015 addresses unfair terms. The County Court and High Court of Justice have jurisdiction over personal disputes under the Senior Courts Act 1981 and the County Courts Act 1984. The Information Commissioner's Office (ICO) enforces data protection. Parties executing a Photo Consent Form (UK) in United Kingdom should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Consumer Rights Act 2015 sets the foundational requirements.

A Photo Consent Form should be used in any situation where photographs or video of an identifiable individual will be taken and used beyond personal, family use.

Schools, nurseries, and childcare settings should obtain written photo consent from parents at the start of each academic year, covering the types of use planned for images of pupils — internal displays, school website, social media, printed newsletters, and press photography. Consent should be updated if new uses are planned.

Sports clubs, youth groups, Scouts, Girl Guides, and community organisations should obtain consent before photographing their members, particularly for images to be posted on websites or social media.

Businessers and charities using photographs of employees, volunteers, clients, or service users in their marketing, fundraising, or public communications materials should obtain consent from the individuals pictured.

Event photographers and videographers should obtain consent from identifiable individuals whose images will appear in event coverage that will be published, broadcasted, or distributed. For large events where individual consent is impractical, a prominent notice at the entry point may supplement (though not replace) individual consent.

Medical and therapeutic settings require consent before photographing patients — even for clinical or training purposes — under both UK GDPR and the General Medical Council's patient confidentiality guidance.

Commercial photography involving models or brand ambassadors should use a full model release agreement, which grants the photographer and commissioning organisation rights to use the images for specified commercial purposes.

In all cases where images of children are concerned, the safety of the child must take priority over convenience — particular care must be taken where children are subject to court orders restricting publicity about their identity.

Parties in United Kingdom should prepare a Photo Consent Form (UK) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under UK law, the UK GDPR and Data Protection Act 2018 govern personal data in this document. The Consumer Rights Act 2015 protects individuals in consumer transactions. Section 62 of the Consumer Rights Act 2015 addresses unfair terms. The County Court and High Court of Justice have jurisdiction over personal disputes under the Senior Courts Act 1981 and the County Courts Act 1984. The Information Commissioner's Office (ICO) enforces data protection. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A UK GDPR-compliant Photo Consent Form should include the following key elements.

Identification of the controller: the name and contact details of the data controller (the organisation taking and using the photographs) and their Data Protection Officer (DPO) if they have one. This is required by UK GDPR Articles 13 and 14 transparency obligations.

Description of the subject: the full name of the individual being photographed (or the child's name if parental consent is being given) and, for children, confirmation of the parent or guardian's relationship to the child.

Purpose of the photographs: a specific description of each purpose for which images will be used — for example: (1) school newsletter; (2) school website; (3) local press; (4) social media (specify platforms). Each purpose should be clearly listed so the consent is specific and informed.

Type of images: whether the consent covers still photographs, video, or both. Some consents cover all digital media; others are limited to specific formats.

Retention period: how long the images will be retained by the organisation before being deleted. UK GDPR requires data to be kept no longer than necessary for the stated purpose.

Sharing with third parties: whether images will be shared with any third parties (press agencies, social media platforms, partner organisations) and the names or categories of recipients.

Lawful basis statement: confirmation that the lawful basis for processing is consent under Article 6(1)(a) of the UK GDPR.

Withdrawal rights: a clear statement that consent can be withdrawn at any time and how to do so, as required by Article 7(3) of the UK GDPR.

Subject rights: a brief summary of the individual's rights under UK GDPR (access, rectification, erasure, objection) and how to exercise them.

Signature and date: signed by the subject (or parent/guardian for a child) with the date of consent.

Additional compliance elements for a Photo Consent Form (UK) used in United Kingdom include: Under UK law, the UK GDPR and Data Protection Act 2018 govern personal data in this document. The Consumer Rights Act 2015 protects individuals in consumer transactions. Section 62 of the Consumer Rights Act 2015 addresses unfair terms. The County Court and High Court of Justice have jurisdiction over personal disputes under the Senior Courts Act 1981 and the County Courts Act 1984. The Information Commissioner's Office (ICO) enforces data protection. Forms-legal.com provides this template as a starting point for United Kingdom-compliant documentation.