Child, guardian, authority, purpose, location, clothing, identifiers, audience, reuse, withdrawal, and retention checklist

What to take away

• Use a welfare and necessity test before a rights form.
• Confirm both adult authority and the child's age-appropriate willingness.
• Inspect clothing, background, captions, voice, metadata, and schedule for identifiers.
• Separate closed sharing from public web, social, press, sponsorship, and advertising.
• Give refusal and withdrawal a discreet operational route.
• Review long-running use as the child matures and technology changes.

Use this checklist for planned images of minors in schools, clubs, charities, community groups, creator work, or campaigns. Mark unresolved items as stops, not implied permission. This tool does not establish legal compliance.

Welfare and purpose

• A defined purpose requires or reasonably supports an identifiable child image.
• A nonidentifying detail, illustration, adult reenactment, or no image was considered.
• The child's best interests and foreseeable long-term effect were assessed.
• The story does not stereotype, humiliate, sexualize, stage trauma, or imply gratitude or endorsement.
• A safeguarding lead can stop capture and publication.
• Siblings, peers, and family safety are included in the risk review.

Child and adult authority

• The child's age, communication needs, and ability to understand are considered without unnecessary public labeling.
• Parent, guardian, agency, school, or representative authority is verified.
• Any court, care, custody, or safeguarding restriction is checked through authorized staff.
• The child receives an honest, age-appropriate explanation.
• The child gives an affirmative response and has a clear stop signal.
• Distress, silence, hiding, or refusal stops optional capture.
• Decisions are refreshed when authority or the child's understanding changes.

The ICO's UK Children's Code tells online services likely to be accessed by children to make best interests a primary consideration, use high-privacy defaults, minimize data, and limit sharing and geolocation. Its age-appropriate design code applies in a defined UK data-protection setting and is not a universal release checklist.

Capture setting

• The location is public enough for the planned activity and approved by the responsible organization.
• Changing, bathroom, sleeping, treatment, counseling, and other private areas are excluded.
• The shoot is observable and interruptible under safeguarding policy.
• Authorized equipment and staff are identified.
• Personal devices and automatic cloud backups are prohibited unless expressly managed.
• Clothing, pose, camera angle, crop, and behind-the-scenes capture are appropriate.
• Children who decline can participate without a conspicuous badge or inferior placement.

Identifiers

• Name, voice, handle, school, club, team, uniform, badge, and number are reviewed.
• Address, street, bus, landmark, timetable, practice time, and repeated route are removed unless necessary and safe.
• Health, disability, care, migration, religion, family, disciplinary, and legal context are protected.
• Filename, geolocation, device, face-grouping, caption, tag, and alt text are checked.
• Other children in the frame have valid status or are excluded.

Audience and platform

• Internal record, classroom, closed portal, family delivery, print, public web, social, press, sponsor, and advertising uses are separate.
• Account, audience, region, term, downloads, comments, messages, embedding, remixing, and location features are reviewed.
• The child and adult know whether the image can be searched, copied, or shared.
• Paid placement and commercial endorsement require specific review.
• The platform's current child and account rules are followed.

Reuse and withdrawal

• New campaign, advertiser, platform, audience, edit, AI tool, or training use triggers fresh review.
• The child and authorized adult have a monitored contact.
• Staff can pause scheduled posts and locate live images quickly.
• Safety requests receive immediate triage.
• Print, cache, backup, archive, and third-party limits are explained accurately.

Storage and retention

• Raw, selected, published, release, identity, and incident records have separate schedules.
• Files move from cameras to controlled organizational storage promptly.
• Working folders show permitted uses and expiry.
• Guardian documents are not exposed to general editors.
• Access ends when staff, volunteers, or contractors leave.
• Deletion or archival disposition is recorded.

The UK Department for Education's school photo and video data guidance supports checking restrictions, secure transfer, contractor roles, personal-device backups, publication, and new technology in schools. Apply it only in its stated UK context.

Common questions

Why can a signed form still fail this checklist?

The child may object, authority may be invalid, the use may change, or publication may create unacceptable safeguarding risk.

Should every group photo be banned?

No blanket answer fits. Assess purpose, recognizability, location, identifiers, notice, authority, welfare, and governing rules.

Can a child image be stored on a volunteer's phone?

Follow organizational policy and law. Controlled equipment and prompt secure transfer reduce personal backup and offboarding risk.

What if the child asks for removal years later?

Locate the record and copies, prioritize safety, apply current law and terms, stop covered use, and explain any limits clearly.