Child image consent compared: key distinctions

What to take away

Child image consent compared: several decisions can apply to the same photograph, and none should be stretched to cover the others. This comparison is educational and must be adapted to local law, child capacity, family authority, school rules, and the actual publication.

Functional comparison

Guardian permission and child assent

Verify who has authority and whether orders, custody, care, or agency rules limit it. Then speak with the child. The child's no should stop an optional creative shoot even if an adult signed. Recheck behavior and words during the session.

Assent should not be reduced to a cheerful pose chosen by an adult. Explain the camera, task, audience, and stop signal. A younger child may communicate through behavior; an older child may understand platform and future-use tradeoffs directly.

School authorization and education records

A school can control access, staff conduct, equipment, and institutional publication. It also holds duties concerning student records and safeguarding. Outside photographers need a contract that states data roles, storage, return, deletion, and permitted use.

A written release should identify the adult’s authority, the image and its intended use, the audience or channels, the term, any reuse, and how to contact the organization about future use. For example: “I, [parent or guardian], authorize [organization] to use [identified image] for [specific purpose] on [named channels] until [date or event]. This permission does not cover other uses or reuse. Contact [contact] to withdraw permission for future use; copies already distributed may not be retrievable.” Ask the child separately, explain the proposed use, and respect a refusal or request to stop.

The U.S. Department of Education explains that a photograph or video can be a FERPA education record. It must be directly related to a student and maintained by an educational agency, institution, or party acting for it, subject to exclusions.

Its FERPA photo and video FAQ stresses context and distinguishes focused from incidental depictions. The guidance does not govern every youth image or private club.

FERPA also has a directory-information exception. A school may disclose information it has designated as directory information, which can include a student photograph, after giving required notice and an opportunity to opt out. Whether a photo qualifies depends on the school’s designation and policy; this exception does not automatically authorize a photographer’s separate portfolio use.

Platform age rules

Minimum account ages, parental supervision tools, child-directed service rules, and feature restrictions differ. A guardian posting from an adult account is not the same as a child submitting an image to a child-directed service.

In the United States, Instagram, TikTok, and Snapchat generally set 13 as the minimum age for a standard account. Google accounts, including YouTube sign-in, generally require users to be 13 to manage an account independently in the United States; supervised options are available for younger children. These are account-eligibility rules, not permission to publish a child’s image or a general age of consent.

Review current account terms, audience defaults, messages, location, recommendations, advertising, downloads, remixing, biometric or face features, and deletion. Do not advise a child to misstate age to bypass a control.

An account rule can also change after publication, so preserve the original review date and assign a named recheck owner.

Record which service, account type, feature, region, and publication purpose were reviewed. That context prevents a narrow platform check from being reused as broad permission for a different audience or later campaign.

Online privacy law

Under the U.S. COPPA Rule, covered operators treat photographs, videos, and audio files containing a child's image or voice as personal information in defined circumstances. The FTC's COPPA compliance FAQ explains parental notice and verifiable consent for covered collection, including child uploads. COPPA has specific coverage and does not regulate every adult's photograph of a child.

The COPPA threshold is under 13. The Rule applies to operators of child-directed online services and to general-audience operators with actual knowledge that they collect personal information from a child under 13. It does not set a universal minimum age for every photo or post.

Other jurisdictions use different age thresholds, lawful bases, and child-rights standards. Never turn one U.S. rule into a global minimum age for all image publication. Under Article 8 of the European Union’s General Data Protection Regulation (GDPR), when an information society service is offered directly to a child and consent is the legal basis, the default age is 16; a member state may set it as low as 13. This concerns a child’s data-protection consent in that context, not blanket permission to publish any photograph. In the United Kingdom, the UK GDPR sets the age at 13 for a child’s own consent to data processing for such services. The Information Commissioner’s Office (ICO) oversees the Children’s Code, formally the Age Appropriate Design Code, for online services likely to be accessed by children.

State law can address different uses. Under California’s Consumer Privacy Act, as amended by the California Privacy Rights Act, covered businesses need opt-in authorization to sell or share personal information of consumers under 16: a parent or guardian provides it for a child under 13, while a consumer aged 13 to 15 may provide it themselves. This is not a general photo-release law or permission to post every child’s image.

Safeguarding

Safeguarding asks whether participation or publication could expose the child to abuse, retaliation, stigma, location risk, sexualization, contact, or distress. A safeguarding lead may prohibit the image even where guardian permission and platform access exist.

There is no single U.S. safeguarding authority for every project. If abuse or exploitation is suspected, contact the relevant state child protective services agency or local law enforcement. The U.S. Department of Health and Human Services’ Child Welfare Information Gateway provides state child-abuse reporting contacts.

The risk assessment should include siblings and peers. It should also consider future manipulation, searchable identity, recurring schedules, and combinations of harmless facts that reveal a protected location.

Reporting and removal

Start with the platform’s reporting tool and select the applicable privacy, child-safety, or intimate-image category. For an intimate image made when the person depicted was under 18, the National Center for Missing & Exploited Children (NCMEC) offers Take It Down to help participating platforms detect and remove copies. Report suspected child sexual exploitation to NCMEC’s CyberTipline.

A Digital Millennium Copyright Act (DMCA) notice may be an option when the image infringes copyright, but it is for the copyright owner or an authorized representative. Permission to use a child’s image and ownership of the photograph’s copyright are separate questions.

Common questions

Can a child provide legal consent alone?

Sometimes, depending on age, capacity, right, activity, and jurisdiction. Obtain qualified advice and do not confuse legal capacity with ethical willingness.

Does school permission cover the photographer's portfolio?

Only if valid authority and clear terms cover that separate purpose. A school location agreement alone is unlikely to answer every person-level and copyright question.

Does COPPA prohibit parents from posting child photos?

COPPA regulates covered online operators' collection from children; it is not a universal ban on adult posts about children. Other laws and safety concerns may apply.

What wins when documents conflict?

Pause the use. Apply governing law, the child's welfare, verified authority, the narrower effective scope, and specialist review rather than selecting the broadest form.