Child, guardian, authority, purpose, location, clothing, identifiers, audience, reuse

• A defined purpose requires or reasonably supports an identifiable child image.
• A nonidentifying detail, illustration, adult reenactment, or no image was considered first.
• The child's best interests and foreseeable long-term effect were assessed.
• The story does not stereotype, humiliate, sexualize, stage trauma, or imply gratitude or endorsement.
• A safeguarding lead can halt capture and publication at any point.
• Siblings, peers, and family safety sit inside the risk review.

• The child's age, communication needs, and ability to understand are considered without unnecessary public labeling.
• Parent, guardian, agency, school, or representative authority is verified.
• Any court, care, custody, or safeguarding restriction is checked through authorized staff.
• The child receives an honest, age-appropriate explanation.
• The child gives an affirmative response and has a clear stop signal.
• Distress, silence, hiding, or refusal stops optional capture.
• Decisions are refreshed when authority or the child's understanding changes.

Verify child and adult authority

• Consider age, communication needs, understanding
• Verify parent, guardian, agency, school authority
• Check court, care, custody restrictions
• Give honest age-appropriate explanation
• Get affirmative response and stop signal
• Stop optional capture on distress or refusal
• Refresh decisions when authority changes

• The location is public enough for the planned activity and approved by the responsible organization.
• Changing, bathroom, sleeping, treatment, counseling, and other private areas are excluded.
• The shoot is observable and interruptible under safeguarding policy.
• Authorized equipment and staff are identified.
• Personal devices and automatic cloud backups are prohibited unless expressly managed.
• Clothing, pose, camera angle, crop, and behind-the-scenes capture are appropriate.
• Children who decline can still take part without a conspicuous badge or inferior placement.

Review identifiers before publication

• Name, voice, handle, school, club, team
• Uniform, badge, and number
• Address, street, bus, landmark, timetable
• Practice time and repeated route
• Health, disability, care, migration, religion
• Filename, geolocation, device, face-grouping
• Caption, tag, alt text, other children in frame

• Clothing, uniforms, badges, and logos that name the child, school, club, or team.
• Background details such as street signs, house numbers, landmarks, and room features.
• Captions, tags, alt text, filenames, and hashtags that name the child or location.
• Voice, accent, and spoken details that identify the child.
• Metadata such as geotags, device data, timestamps, and embedded author fields.
• Posting schedule and cross-posting that reveal routines, locations, or attendance.
• Names, ages, diagnoses, and school or team details unless necessary and safe.

• Internal record, classroom, closed portal, family delivery, print, public web, social, press, sponsor, and advertising uses are separate.
• Account, audience, region, term, downloads, comments, messages, embedding, remixing, and location features are reviewed.
• The child and adult know whether the image can be searched, copied, or shared.
• Paid placement and commercial endorsement require specific review.
• The platform's current child and account rules are followed.

• A new campaign, advertiser, platform, audience, edit, AI tool, or training use triggers fresh review.
• The child and authorized adult have a monitored contact.
• Staff can pause scheduled posts and locate live images quickly.
• Safety requests receive immediate triage.
• Print, cache, backup, archive, and third-party limits are explained accurately.
• Withdrawal is logged with the date, requester, assets removed, and remaining limits.

• Raw, selected, published, release, identity, and incident records have separate schedules.
• Files move from cameras to controlled organizational storage promptly.
• Working folders show permitted uses and expiry.
• Guardian documents are not exposed to general editors.
• Access ends when staff, volunteers, or contractors leave.
• Deletion or archival disposition is recorded.
• Deletion and withdrawal records name the date, requester, assets removed, and remaining limits.

• checking restrictions
• secure transfer
• contractor roles
• personal-device backups
• publication
• new technology Apply it only in its stated UK context.

• purpose
• recognizability
• location
• identifiers
• notice
• authority
• welfare
• governing rules