Do You Need A School Photography Consent Form?

Do you need a school photography consent form before you take photos of children at a school or nursery? In most cases, yes - or at least you need a clear, written permission process that covers what you're taking, why you're taking it and how the images will be used.

If you run a photography business, nursery, childcare setting or school photo day service, this can feel sensitive. You're dealing with children, parents, safeguarding expectations and personal data all at once.

The good news is that this doesn't have to be complicated. A well-drafted photography consent form, a sensible school photographer contract and clear data protection steps can help you run photo days smoothly and give families confidence in your process.

Do You Need A School Photography Consent Form In The UK?

Yes, you should usually have a school photography consent form in the UK if you're taking identifiable photos of children and using those photos beyond a narrow internal purpose.

A child's photo can be personal data under the UK GDPR and the Data Protection Act 2018 if the child can be identified from it. That means you need a lawful basis for collecting and using the image, and you need to tell parents or carers what you're doing with it.

For a standard school portrait day, consent is often the most practical route because parents are being asked to allow their child's image to be taken and made available for purchase. For other uses, such as a nursery display board, website banner or Instagram post, you should treat consent separately and make it very clear.

A written consent process also helps you manage expectations. Without one, you may find yourself dealing with disputes about whether a parent agreed to photos being uploaded to a gallery, shared with extended family or used in your marketing.

For example, say Priya runs a children's photography business and has been booked by a nursery for annual portraits. The nursery tells parents that photos will be taken, but the notice doesn't say that images will be uploaded to Priya's password-protected gallery for ordering. If a parent later complains, Priya and the nursery may struggle to show that the parent understood and agreed to that use.

A simple form could have avoided the issue by explaining:

• who is taking the photos
• what type of photos will be taken
• how parents can access proofs
• how long images will be kept
• whether images will be used for marketing
• who to contact to withdraw consent or ask questions

Who Can Give Consent For Children's Photos?

A person with parental responsibility should give consent for children's photos, especially where images may be used outside the school or childcare setting.

In England and Wales, parental responsibility usually sits with the child's mother and, depending on the family circumstances, the father or other legal guardian. Schools and nurseries often already hold records about who has parental responsibility and who can make decisions for the child.

If you're the photographer, don't try to work this out from scratch on the day. Your contract should make the school or nursery responsible for collecting and checking parental consent forms, unless you've agreed to manage that process directly.

What If Parents Disagree?

One parent with parental responsibility can often give permission, unless there's a court order or specific restriction. In practice, schools and nurseries may take a more cautious approach if they know there's a dispute.

Your process should allow the setting to flag children who must not be photographed or whose images need to be handled differently. This might mean:

• keeping a confidential do-not-photograph list for staff on the day
• using seating plans or name labels that help avoid mistakes
• briefing the photographer before any group shots
• checking class photos carefully before proofs are released

For group photos, the risk is higher because one child's lack of consent can affect the entire image. If a child must not appear in a group photo, you need a practical plan before the camera comes out.

What Should A Nursery Photo Consent Form Include?

A nursery photo consent form should cover the taking, storage, sharing, privacy consent and use of children's images in clear, parent-friendly language.

Nurseries and early years providers also need to think about safeguarding and the Early Years Foundation Stage framework. In Wales, childcare providers will also need to consider the relevant Welsh safeguarding and childcare requirements. The form itself is only one part of the process, but it's a helpful anchor for staff, parents and photographers.

A good nursery or school photography consent form will usually include:

• Child details: the child's name, room, class or year group, and any reference number used for ordering.
• Parent or carer details: the name and contact details of the person giving consent.
• Purpose: why the photos are being taken, such as annual portraits, class photos, learning records or nursery marketing.
• Who will take the photos: whether this is staff, an external photographer or both.
• Where images will appear: for example, printed proofs, private online galleries, internal displays, newsletters, websites or social media.
• Separate choices: different tick boxes for different uses, rather than one blanket yes or no.
• Retention: how long images and order information will be kept.
• Withdrawal: how parents can withdraw consent and what happens to images already printed or lawfully used.
• Privacy information: who controls the data and where parents can find the privacy notice.

Separate tick boxes are especially useful. A parent may be happy for their child to be included in a private portrait gallery but not on social media. Bundling those choices together can make the consent less meaningful.

A Practical Consent Wording Example

Your wording should be tailored to your actual process, but the structure might look like this:

• I agree to my child being photographed for individual and class portraits.
• I agree to my child's images being uploaded to a secure online gallery for viewing and ordering.
• I agree to my child's image being used in nursery or school internal displays.
• I agree to my child's image being used on the nursery or school website.
• I agree to my child's image being used on social media.

You should also avoid pairing a child's full name with a marketing image unless there's a clear and necessary reason. For most childcare and school marketing, first names only or no names at all is safer.

How Does UK GDPR Apply To School And Nursery Photos?

UK GDPR applies when children's photos identify them or are linked to other information that identifies them.

That means school and nursery photos aren't just creative assets. They're also personal data, and your business needs a lawful, careful way to collect, store and share them.

Photos aren't automatically special category data just because they show a child's face. They can become more sensitive if they reveal health information, religion, disability or other protected details, or if they're used for biometric identification. Even where special category rules don't apply, children's data deserves extra care.

Controller Or Processor?

You need to work out whether you're acting as a controller, processor or both.

If a school tells you exactly what to photograph, how to handle images and when to delete them, you may be acting as the school's processor for that part of the job. In that case, the UK GDPR requires a written data processing agreement with specific terms.

If you decide how your online gallery works, collect parent orders directly, set your own retention periods and use the customer details for your own business records, you may be an independent controller for those activities.

This is one of the most common areas where template contracts fall short. The practical setup matters, so your documents should match what actually happens.

Privacy Notices And Data Rights

Parents should receive a clear privacy notice at or before the point their child's image is collected. This can sit alongside the consent form, but it should explain the data protection position in plain language.

Your privacy notice should cover:

• who is responsible for the data
• what personal data is collected
• why it's collected
• the lawful basis you rely on
• who it's shared with
• where it's stored
• how long it's kept
• the rights parents and children may have

Subject access requests usually need to be answered within one month. If there's a personal data breach that creates a risk to people's rights and freedoms, you may need to notify the Information Commissioner's Office within 72 hours of becoming aware of it.

You should also check whether your business needs to pay the ICO data protection fee. Many organisations that process personal data must register and pay a fee, although exemptions can apply.

Can You Use Children's Photos For Marketing Or Online Galleries?

Yes, you can use children's photos for marketing or online galleries, but you need clear permission, strong access controls and a process that respects withdrawals.

Marketing use is usually where parents feel most protective. A photo on a website, brochure, Facebook page or Instagram post is very different from a private proof gallery. Treat it as a separate marketing consent choice.

If you're using photos to promote your photography business, nursery or school, make sure your form explains:

• which channels may be used, such as website, printed brochures or social media
• whether the child will be named
• whether images may be cropped, edited or used with text
• how long the image may stay in use
• how a parent can ask for the image to be removed

For online galleries, your process should be designed around privacy from the start. Consider using:

• unique access codes for each child or family
• password-protected galleries
• expiry dates for galleries and proofing links
• limits on downloading or screenshotting where your platform allows it
• watermarks on proofs
• clear rules on who can share access codes

If you sell prints or digital files to parents online, you should also think about your customer terms. The Consumer Rights Act 2015 requires services to be performed with reasonable care and skill, and goods must meet the required standards. If you sell customised photo products, cancellation rights under the Consumer Contracts Regulations 2013 may be limited, but your terms need to explain this properly.

What Should Be In A School Photographer Contract?

A school photographer contract should set out the photo day process, data responsibilities, safeguarding expectations, payment terms and image rights.

This contract protects both sides. It gives the school or nursery comfort that you're handling children and data carefully, and it gives your photography business a clear scope of work.

Your contract should usually cover:

• Services: dates, locations, shot list, class photos, sibling photos, staff photos and retouching.
• Consent process: who collects consent, what form is used and how non-consenting children are identified.
• Safeguarding: supervision, visitor sign-in, ID checks, conduct on site and reporting concerns.
• DBS checks: whether a check is required by the school or nursery, especially if there may be unsupervised or regular contact with children.
• Data protection: controller and processor roles, security, deletion, breach reporting and sub-processors.
• Online gallery rules: access, passwords, expiry dates, downloads and parent ordering.
• Intellectual property: who owns copyright and what licences are granted to the school, nursery and parents.
• Fees and payment: booking fees, commission, parent purchases, refunds and late payment.
• Liability: what happens if a photo day is cancelled, images are lost or a child is photographed in error.

Under UK copyright law, the photographer will usually own copyright in the images unless the contract says otherwise. The school, nursery and parents then need a licence to use the images in the agreed ways.

That licence should match the permissions given by parents. For example, if a parent only agreed to private family use, the school shouldn't receive a broad marketing licence for that child's image.

Schools in England also work within statutory safeguarding guidance such as Keeping Children Safe in Education. Wales has its own safeguarding guidance for education settings. Your contract doesn't replace those duties, but it should sit neatly alongside the setting's policies.

Common Mistakes To Avoid

The most common mistakes are usually practical ones: the form says one thing, the gallery does another, and staff on the day don't know which children have restrictions.

Here are the issues we see causing problems for photography and childcare businesses:

• Using one blanket consent box: taking photos, selling prints, internal displays and social media shouldn't all be bundled together.
• Forgetting group photos: you need a plan for children who can't appear in class or nursery group images.
• Not naming the photographer: parents should know if an external business is taking and handling the images.
• Leaving galleries open too long: old image galleries create unnecessary data risk.
• No written contract with the school or nursery: verbal arrangements make it harder to prove who was responsible for consent, deletion or refunds.
• Using images for marketing because they look lovely: a great photo still needs the right permission before it goes online.
• Not briefing staff: your consent process only works if the people running photo day know how to follow it.

A simple pre-photo-day checklist can make a big difference. Before the session, confirm that consent records are up to date, restricted children are identified, your gallery settings are ready and everyone knows who to contact if something goes wrong.

Key Takeaways

• A school photography consent form helps you prove what parents agreed to and how children's images may be used.
• Children's photos can be personal data under the UK GDPR and Data Protection Act 2018, so privacy notices, retention rules and security matter.
• Marketing use and social media should have separate, clear consent rather than being hidden in a general photo permission.
• Your school photographer contract should deal with consent, safeguarding, data protection, copyright, galleries, fees and refunds.
• Safeguarding is a practical process as well as a document issue, so staff briefings and do-not-photograph lists are essential.
• Templates can be a useful starting point, but your forms and contracts work best when they reflect how your photo day actually runs.

If you'd like help with your photography consent forms, school photographer contracts, privacy notices and image use policies, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.