Photo(n)

Essential Steps for GDPR Compliant Photography

Learn how to capture compelling images while respecting privacy rights and EU GDPR regulations. Follow these 6 essential steps to ensure your photography is compliant.

STEP 1
Prioritize Context Over Individual (Shooting Technique)

When shooting in public or at events, adjust your technique to avoid singling people out:

  • Focus on the Context, Not the Person: When photographing a public space or event, focus your lens on the activity, the atmosphere, or general scenes.
  • • Avoid isolating or zooming in on specific individuals unless you have already obtained their consent.
STEP 2
Focus on the Non-Identifiable (Safe by Default)

Stick to subjects that are not considered personal data under GDPR:

  • Objects & Scenery: Capture landscapes, buildings, and inanimate objects. Photos where no people are present or identifiable in the frame are always compliant.
  • True Crowd Shots: Shoot wide angles of public events or busy areas where the focus is on the scale, atmosphere, or context. The photo must feature a large group where no single individual is clearly discernible, isolated, or the main subject.
STEP 3
Secure Express, Written Consent (The Gold Standard)

For any close-up or identifiable image intended for public use (projects, social media, exhibitions), always get permission:

  • Posed Photos with Consent: Ensure the subject (if an adult) has clearly and specifically agreed to the photo being taken and knows exactly how you will use it.
  • • This permission should be documented with a written and signed consent form or a robust digital alternative.
STEP 4
Anonymize Before Upload (The Safe Edit)

If an otherwise great photo features an identifiable person without consent, make the necessary edit:

  • Anonymize Shots: Use editing software to blur, pixelate, or crop out any features that could identify a person in the background.
  • • This includes faces, name badges, license number plates, or distinct house numbers, certain buildings prohibited to be photographed.
  • • By removing the identity, the image is no longer considered personal data.
STEP 5
Be Prepared to Erase (Respecting Rights)

Consent is not permanent. If you upload a photo based on consent, be ready to comply with the individual's rights:

  • Respect the Right to Withdrawal: If an identifiable subject contacts you and asks for their photo to be removed, you must remove it immediately and confirm its complete removal.
STEP 6
Read Terms and Conditions, Privacy Policy (To use Photo(n))

For more information in detail on EU GDPR compliance, read Terms and Conditions, Privacy Policy which are a strict must for using or posting over Photo(n).