Are photos personal data under GDPR?
Asked by: Delilah Dietrich PhD | Last update: June 5, 2026Score: 4.8/5 (14 votes)
Yes, photos are considered personal data under GDPR if they can identify a living individual, meaning any picture where a person's face or other unique features are visible, requiring organizations to have a legal basis (like explicit consent or legitimate interest) for processing them, with high-resolution images or those used for biometric identification (like facial recognition) falling into the stricter "special category" of data.
Are photos considered personal information?
There are no limitations regarding the format or the medium on which the information is contained. Information kept in graphical form (pictures) or stored as sound (acoustic recordings) can be personal information provided that the other criteria in the definition are fulfilled.
Are photographs considered data?
Short answer: Yes – images can constitute personal data if they depict an identifiable individual.
Is picture part of data privacy?
Photos of individuals and groups are considered personal information. Thus, it is within the scope of DPA.
Are pictures of people pii?
Is a photo considered PII? The GDPR does not explicitly include a photograph as part of the definition of PII. However, any information that can be used to identify an individual, such as a facial image, may be considered personal data depending on its context and purpose.
What is personal data under GDPR?
Does GDPR apply to photographs?
A photograph of a person or persons who are identifiable (i.e. you can clearly see their face and therefore identify them) constitutes personal data. This means – to be GDPR compliant - photography needs to be treated in the same way as, for example, a spreadsheet containing names, addresses and dates of birth.
Is it illegal to post photos of people without consent?
If you discover that someone posted either photos or videos of you or your family on a social media site without your permission, the first thing to know is that it is illegal. Keep in mind that every platform has a different privacy policy, so the individual that posts may think they did nothing wrong.
Are photos personal information?
Photos, videos and other recordings of a person are types of personal information and as such are protected by privacy law and sometimes by copyright law. The main things to consider when taking or sharing photos are consent, context and risk.
What is not considered as personal data under GDPR?
Information concerning a 'legal' rather than a 'natural' person is not personal data. Consequently, information about a limited company or another legal entity, which might have a legal personality separate to its owners or directors, does not constitute personal data and does not fall within the scope of the UK GDPR.
Is photo sensitive personal data?
Photos are considered personal data as soon as someone in the picture is recognisable. This is true for group photos as well, although the breach of privacy is considered to be less severe if no one person is particularly prominent in the image or perceived as an individual.
Is photography a personal data?
If someone can be recognised from a photograph it's usually considered their personal data. As with any use of personal data, choosing your valid reason or 'lawful basis' is essential.
What is the 20 60 20 rule in photography?
The 20/60/20 rule in photography is a shooting strategy, popularized by photographer Paul Nicklen, that divides your time in a session to balance safety and creativity: spend the first 20% getting technically sound, "safe" shots; the next 60% experimenting with angles, light, and techniques to find your unique style; and the final 20% going bold for risky, "once-in-a-lifetime" shots that push boundaries and can become portfolio highlights. This approach prevents burnout by ensuring you get usable images while also fostering artistic growth.
What kind of data is a photo?
This is known as metadata, and it can include details of the camera, lens and shooting settings used, plus optional information about the photographer, location and more. The way of recording metadata for digital photos is in the form of EXIF data, and it has many practical benefits.
Is a photo considered data?
Answer: Under normal circumstances, a photo is considered personal data.
Is a photo biometric data GDPR?
For example, data protection law says that photographs: “are covered by the definition of biometric data only when processed through a specific technical means allowing the unique authentication of a natural person.”
What counts as sensitive personal data in GDPR?
genetic data, biometric data processed solely to identify a human being; health-related data; data concerning a person's sex life or sexual orientation.
What is not a personal data in GDPR?
In terms of origin, non-personal data can be data which never related to natural persons (such as data on weather or supply chains), or data which was initially personal data, but has been anonymised (through use of certain techniques to ensure that individuals to whom the data relates to cannot be identified).
What are 5 examples of personal data?
What is personal data?
- a name and surname.
- a home address.
- an email address such as 'name.surname@company.com '
- an Internet Protocol (IP) address.
- an identification card number.
- a cookie ID.
- the advertising identifier of your phone.
- data held by a hospital or doctor, which could be a symbol that uniquely identifies a person.
What are the 6 legal bases of GDPR?
Article 6 of the General Data Protection Regulation (GDPR) sets out what these potential legal bases are, namely: consent; contract; legal obligation; vital interests; public task; or legitimate interests.
Is a photo considered personal information?
Scope of Personal Data: Photographs can be considered “personal data” because they can identify an individual.
Can I use a photo of someone without their permission?
Copyright Infringement. Copyright law can provide protections against unauthorized photo use. The photographer gets exclusive rights to the image. Using someone's copyrighted photograph without permission constitutes copyright infringement.
Are photographs considered records?
all books, papers, maps, photographs, machine-readable materials, or other documentary materials, regardless of physical form or characteristics, made or received by an agency of the United Stated Government under Federal law or in connection with the transaction of public business and preserved or appropriate for ...
Can I sue someone for posting a picture of me without my consent?
Yes, you can often sue someone for using your photo without permission, especially for commercial gain or if it places you in a false light, through claims like Right of Publicity, Invasion of Privacy (false light, intrusion), or Copyright Infringement (if you own the photo), but success depends on factors like public vs. private setting, commercial use, and state laws. Actions range from sending a cease-and-desist letter to filing lawsuits for damages like emotional distress or lost income.
Can someone post a picture of me on social media without my permission?
Publishing images of you without your consent
If you took the photo, you usually own it. But, if you didn't take the photo but you are in it, someone could breach your rights (such as data protection or privacy rights) by posting it. This can be true even if you do not own the copyright to it.
What to do if someone shares your private photos?
You can now bring a new type of federal civil lawsuit.
This lets you bring a civil action in federal court against someone who shared intimate images, explicit pictures, recorded videos, or other depictions of you without your consent (15 U.S.C. § 6851).