Are photos of people personal data?

Asked by: Prof. Elissa Blick  |  Last update: April 28, 2026
Score: 4.6/5 (4 votes)

Yes, photos of people are generally considered personal data under privacy laws like GDPR and CCPA because they can identify a living individual, directly or indirectly, triggering data protection obligations, especially when processed electronically or stored in a system. While generic images (landscapes, anonymous crowds) aren't personal data, any identifiable face or feature makes it so, requiring consent or a legal basis for processing, even in public spaces.

Is a photo of a person personal data?

If someone can be recognised from a photograph it's usually considered their personal data.

Are photos considered personal information?

There are no limitations regarding the format or the medium on which the information is contained. Information kept in graphical form (pictures) or stored as sound (acoustic recordings) can be personal information provided that the other criteria in the definition are fulfilled.

Do I need consent to take a photo of someone?

It is generally okay for people to take photographs at any public place or any private place that they own or rent. Being present on someone else's private property generally requires the property owner's consent to take photos. You would also need permission to be there in the first place (or you'd be trespassing).

What is considered someone's personal data?

“'personal data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier ...

Delete yourself from the Internet

41 related questions found

What are 5 examples of personal data?

What is personal data?

  • a name and surname.
  • a home address.
  • an email address such as 'name.surname@company.com '
  • an Internet Protocol (IP) address.
  • an identification card number.
  • a cookie ID.
  • the advertising identifier of your phone.
  • data held by a hospital or doctor, which could be a symbol that uniquely identifies a person.

What are the four types of personal data?

Categories of Personal Data

  • Basic Identifiers: Information such as: ...
  • Sensitive Data (Special Categories): Sensitive personal data requires extra care due to its private nature. ...
  • Behavioral and Digital Identifiers: Data points derived from online behavior or usage patterns, such as: ...
  • Financial Information: Information like:

Can I report someone for taking a picture of me?

Yes, you can take legal action against someone who takes your picture without consent. Potential legal actions include: Filing a lawsuit for invasion of privacy. Seeking damages for emotional distress.

Can someone post a picture of me on social media without my consent?

Publishing images of you without your consent

If you took the photo, you usually own it. But, if you didn't take the photo but you are in it, someone could breach your rights (such as data protection or privacy rights) by posting it. This can be true even if you do not own the copyright to it.

Can I sue someone for taking a picture of me without consent?

You can now bring a new type of federal civil lawsuit.

This lets you bring a civil action in federal court against someone who shared intimate images, explicit pictures, recorded videos, or other depictions of you without your consent (15 U.S.C. § 6851).

Is picture part of data privacy?

Photos of individuals and groups are considered personal information. Thus, it is within the scope of DPA.

What qualifies as sensitive personal data?

Sensitive personal information includes:

Racial or ethnic origin, citizen or immigration status, religious or philosophical beliefs, or union membership. Contents of messages (e.g., emails, texts, chats), unless it's directed to the business. Genetic data. Neural data.

Are photos considered data?

Photographs that can be linked to a patient are considered identifiable PHI, and therefore, their handling, sharing, and storage are subject to HIPAA requirements.

Is a photo of a person considered pii?

Is a photo considered PII? The GDPR does not explicitly include a photograph as part of the definition of PII. However, any information that can be used to identify an individual, such as a facial image, may be considered personal data depending on its context and purpose.

Is a photo of an individual personal information?

Information is only considered to be personal information if it is about an “identifiable individual”. Individuals may be identified using their name or another unique number or characteristic, eg. photograph, SIN number, fingerprint, CWL ID, employee number, or student ID.

What kind of data is a photo?

This is known as metadata, and it can include details of the camera, lens and shooting settings used, plus optional information about the photographer, location and more. The way of recording metadata for digital photos is in the form of EXIF data, and it has many practical benefits.

Can you press charges on someone for posting pictures of you?

Yes, you can often take legal action, potentially including pressing criminal charges or filing civil lawsuits, if someone posts pictures of you without consent, especially if the images are intimate, used commercially, or shared in a way that causes harm (like defamation or harassment). Actions range from demanding removal to suing for damages, with specific recourse depending on state laws, the nature of the photo (public vs. private), and its use (e.g., commercial, explicit, or harassing).
 

Can you legally make someone delete pictures of you?

In the United States, statutes protecting privacy and intellectual property rights can be used to make someone take down photos of you under certain circumstances.

Can you sue someone for posting you on social media without permission?

If someone posts your photo or video without your permission, you can try to contact them and ask them to take it down if you know who they are. You can then pursue legal action if that person continues to refuse.

Can someone take a picture of me in public without my consent?

Unfortunately, legally there is no law saying that anyone cannot take a photo of someone who is out in public area where anyone can see them with their own eyes.

What's it called when someone takes a picture of you without your consent?

Some photos taken or posted without consent may be an invasion of privacy. Others might more specifically violate intellectual property or revenge porn laws. Your options depend on the content of the photo and when or where it was taken.

Can someone post a picture of me without consent?

Yes, someone can post a picture of you without permission, especially in public, but it becomes illegal or actionable if it's private, intimate, used for commercial gain, or highly offensive, violating privacy rights, right of publicity, or creating defamation, allowing recourse through platform reporting, cease-and-desist letters, and legal action.
 

What is not personal data?

Information about companies or public authorities is not personal data. However, information about individuals acting as sole traders, employees, partners and company directors where they are individually identifiable and the information relates to them as an individual may constitute personal data.

What are the top 3 big data privacy risks?

What Are The Top 3 Big Data Privacy Risks?

  • Cyberattacks and hacking.
  • Lack of transparency in data usage.
  • Non-compliance with privacy laws.

What are the penalties for violating data privacy?

– (a) The unauthorized processing of personal information shall be penalized by imprisonment ranging from one (1) year to three (3) years and a fine of not less than Five hundred thousand pesos (Php500,000.00) but not more than Two million pesos (Php2,000,000.00) shall be imposed on persons who process personal ...