Image Rights in the UK: What Businesses Need to Know

If your business uses photos or videos in marketing, on your website, or around the workplace, you’re dealing with “image rights” every day - whether you realise it or not.

In the UK, there’s no single, neat “right to your image”. Instead, a mix of copyright, data protection (GDPR), privacy, advertising and contract law governs when and how you can use images of people. Get it right and you’ll build trust and stay compliant. Get it wrong and you could face takedown demands, fines, compensation claims or reputation damage.

This guide breaks down image rights in the UK in plain English - from consent and model releases to CCTV, copyright ownership and social media - so your business is protected from day one.

What Do “Image Rights” Mean In The UK?

“Image rights” isn’t a single legal concept in UK law. Instead, different laws will apply depending on the situation and how you’re using the image. The most common legal building blocks are:

• Data protection (UK GDPR and Data Protection Act 2018): If a person can be identified from an image (alone or with other data), it’s personal data. You’ll need a lawful basis to process it (such as consent or legitimate interests), and you must meet GDPR principles like transparency, data minimisation and security.
• Copyright and moral rights (Copyright, Designs and Patents Act 1988): The photographer or creator usually owns copyright in a photo or video, not the subject. Moral rights (like the right to be credited) may also apply unless waived.
• Privacy/misuse of private information and breach of confidence: Even if you shot the photo yourself, using or publishing images taken in circumstances with a reasonable expectation of privacy can be unlawful.
• Passing off and trade mark law: Using a person’s likeness (especially a well-known individual) to imply endorsement can lead to claims, regardless of whether an “image right” exists as a standalone right.
• Advertising rules (CAP Code) and consumer law: You need permission to use testimonials and endorsements, and marketing must not be misleading - including how you present people’s images.

Because these rules overlap, the safest approach is to plan how you capture, store and use images upfront, and put clear permissions in writing.

When Can You Use Someone’s Image?

The key question is the context. Are you filming in a truly public place, or in a private setting? Is the use editorial (e.g. reporting) or commercial (e.g. advertising)? And have you clearly told people how you’ll use their image?

Public Spaces Versus Private Spaces

In general, you can capture imagery in public spaces if you’re respectful and not harassing anyone. However, commercial use (advertising or promotion) usually requires permission, even if the photo was taken in a public place. If you’re unsure how far you can go with filming out and about, it helps to review guidance around filming people in public.

In private spaces (offices, shops, events or venues), get explicit permission from the property owner and, for commercial use, consent from identifiable people in shot. Signage and clear notices help with transparency, but they’re rarely a substitute for written permission where promotional use is intended.

Editorial Use Vs Commercial Use

• Editorial use (e.g. reporting a news event) can involve different considerations and will often rely on freedom of expression. Even then, privacy and data protection can still bite depending on the circumstances.
• Commercial use (ads, case studies, brochures, website banners, paid social) almost always requires permission from identifiable people, ideally via a signed release.

Adults, Employees And Children

• Adults: For commercial use, a signed permission is strongly recommended. Verbal consent is risky to prove later.
• Employees: Don’t assume you can freely use staff photos for advertising. Include a clear clause and opt-out process in your Employment Contract or get separate consent for promotional use. Consent should be genuinely optional.
• Children: You’ll generally need parental or guardian consent for identifiable images. For sensitive contexts (schools, healthcare, youth clubs), use robust permission forms and be extra careful about reuse.

To make this easy, many businesses use a standard Model Release or a Photography/Video Consent Form for anyone featured in marketing content.

Using Photos And Videos In Your Marketing

Images are powerful for brand-building - but this is where most businesses run into risk. A few practical rules of thumb will keep you safe.

Get Written Permission For Promotional Use

Written permission (a release form) specifies exactly how you can use an image and for how long. It can cover online and print use, paid ads, sublicensing, edits and whether you can use the person’s name or tag them on social media. It’s much easier to secure permissions at the time of the shoot than to chase people months later.

For organised shoots, send your crew out with your own Model Release (for featured individuals) and a Photography/Video Consent Form (for general participants) so you have a record of permissions and any restrictions.

User-Generated Content (UGC) And Social Tags

Customers love sharing content - and brands love reusing it. But asking for a quick “YES” in comments may not be enough for full commercial use. Make sure your request clearly covers how you’ll republish, any paid usage and where it will appear (website, paid ads, email). Keep a record of the customer’s consent and handle personal data under GDPR (see below).

If you’re paying creators or influencers to produce content, set out rights and permissions in an Influencer Agreement so you own or properly license the content and can use it across your channels.

Stock Images And Licensing

Stock libraries are convenient, but read the licence. Some images are editorial use only, some exclude sensitive topics (e.g. health, finance, politics), and many restrict use in logos or merchandise. Keep your licence records so you can prove your rights if challenged.

Copyright In Images You Commission

If you hire a freelance photographer or videographer, they usually own copyright by default unless your contract assigns the IP to you or grants you a wide commercial licence. Avoid disputes by making copyright ownership and usage rights crystal clear in your service agreement.

If you’re unsure about legal risks when using images sourced online, it’s worth brushing up on using copyrighted images online and the potential penalties for photo copyright infringement.

Data Protection, Privacy And CCTV

Images that identify a person are personal data. That means UK GDPR applies - not just for marketing content, but also for security cameras, staff headshots, event footage and customer photos.

Your Lawful Basis

You need a lawful basis to process personal data (images). For marketing, you’ll often rely on consent via a release form. For internal uses (like staff ID photos) or limited promotional use where the impact on individuals is low, you might rely on legitimate interests - but you should complete a Legitimate Interests Assessment to confirm it’s appropriate.

Transparency And Notices

Tell people how you’ll use their images in a clear and accessible way. For websites and apps, set this out in your Privacy Policy. For events and workplaces, use signage and provide a link to more information. If you operate CCTV, display signs and have a policy covering purposes, retention and who has access.

Retention And Security

Don’t keep images longer than necessary. Set retention periods (for raw footage and edited content) and secure your storage with appropriate access controls. If you share images with third parties (editors, agencies, cloud providers), ensure you have a Data Processing Agreement in place where they’re processing personal data on your behalf.

CCTV And Audio Recording

CCTV is common in shops and offices, but it’s subject to GDPR. Record only what you need, don’t point cameras into areas with a high expectation of privacy (like toilets), and avoid audio recording unless you have a clear, justifiable reason - audio is far more intrusive. For more on this, check the practical do’s and don’ts for cameras in the workplace and the risks of CCTV with audio.

Copyright And Ownership Of Images

It’s a common misconception that if your business is in the photo, you own it. Not necessarily. Ownership usually follows the creator - the photographer or videographer - unless there’s an agreement to the contrary.

Who Owns What?

• Freelancers and agencies: They typically own copyright unless your contract assigns the IP to you or grants an exclusive licence.
• Employees: Content created by an employee “in the course of employment” is generally owned by the employer, but it’s best to spell this out in the Employment Contract and related IP policies to avoid doubt.
• Influencer/creator content: Unless assigned, creators often retain ownership. Your Influencer Agreement should set out usage rights, approval processes and ad disclosure rules.

Moral Rights

Authors of photos and videos can have “moral rights”, including the right to be identified as the author and to object to derogatory treatment of their work. These may be waived in a contract, but they don’t automatically disappear. If credit matters (for you or the creator), handle it explicitly in writing.

Avoiding Infringement

Don’t lift images from Google, social feeds or competitors. Even if an image is widely shared, copyright still applies. If you must use third-party content, obtain the licence, keep evidence of permissions, and comply with any attribution and usage limits. If someone sends your business imagery for use (e.g. a supplier’s product photo), ensure they have the right to share it and that your usage is covered.

Managing Image Rights Day-To-Day: A Practical Checklist

Here’s a simple, business-friendly process to reduce risk without killing your creativity.

1) Map Your Image Uses

• Where do you capture images? (events, shop floor, website uploads, CCTV)
• How do you use them? (ads, social, profiles, internal comms, security)
• Who else touches them? (agencies, editors, platforms, cloud providers)

2) Decide Your Legal Groundwork

• Pick your lawful basis per use (consent vs legitimate interests) and document it.
• Write or update your Privacy Policy to explain image processing clearly.
• Set retention periods and access controls for raw and edited media.

3) Put The Right Contracts And Forms In Place

• Use a Model Release for featured individuals in marketing.
• Use a Photography/Video Consent Form for events and general participants.
• Agree IP ownership and usage rights up front with freelancers and agencies.
• Work with creators under a clear Influencer Agreement, and follow ASA rules on advertising disclosures.
• Have a Data Processing Agreement with any third party processing your images.

4) Set Team Policies And Training

• Explain when consent is needed and how to use release forms in the field.
• Train staff on what they can and can’t post to branded social accounts.
• Document social media reuse rules for UGC (what to ask, how to record consent).

5) Be Careful With Sensitive Contexts

• Health, children, schools, financial hardship and other sensitive contexts require extra care and explicit consent.
• If you operate CCTV, check the angles, restrict audio recording, post clear signs and follow internal policies. For workplace setups, it’s worth revisiting guidance on workplace cameras.

6) Respond Quickly To Concerns

• Have a simple process to remove or edit content if someone objects.
• Keep a central record of consents and licences so you can verify permissions fast.

Common Image Rights Pitfalls (And How To Avoid Them)

Even careful businesses get caught out by these avoidable mistakes.

• Assuming staff consent covers advertising: Add a specific, optional consent for promotional use, not just internal communications.
• Using “public” photos commercially without permission: Editorial and commercial uses are different - get a release.
• Relying on DMs or comment “YES” for paid ads: Casual consent is hard to prove and rarely covers broader usage - get it in writing.
• Forgetting GDPR: If people are identifiable, your privacy duties apply. Be transparent and set a lawful basis for each use.
• Not securing copyright ownership when commissioning content: Put IP assignments or robust licences into your production contracts.
• Overreaching with CCTV: Excessive filming or audio recording can breach GDPR. Minimise scope and document your justification. If you’re considering audio, re-check the risks of CCTV with audio before you switch it on.
• Reposting images found online: Don’t assume free-to-use. Stick to licensed sources or obtain explicit permission. When in doubt, review rules on copyrighted images online.

Key Takeaways

• There’s no standalone “image right” in the UK - instead, a mix of GDPR, copyright, privacy, advertising and contract law governs how you can capture and use images.
• For commercial use, get written permission from identifiable people using a simple, tailored Model Release or Photography/Video Consent Form.
• Treat identifiable images as personal data: set a lawful basis, be transparent in your Privacy Policy, limit retention and put Data Processing Agreements in place with processors.
• Sort out copyright early when commissioning photos or videos, and use an Influencer Agreement when working with creators so you have the rights your marketing needs.
• Be cautious with CCTV, especially audio recording. Use clear signage, minimise what you capture and follow workplace guidance on cameras at work.
• Set internal processes for consent, social media reuse and takedown requests so you can respond quickly and reduce risk as you grow.

If you’d like help putting the right image permissions, policies and contracts in place, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.