Photographs, Directories and Internal Publicity
Low-stakes processing that generates complaints out of proportion to its sensitivity, because it is the part people can see.
IMAGE AND DIRECTORY REGISTER
Per use, because the answer differs
- UseInternal directory, website, social media, marketingEach needs its own answer
- BasisLegitimate interests internally; consent externallyExternal publicity is where consent genuinely fits
- AskedWhen, and in what termsNot buried in the contract
- RefusalWhat happens if they say noNothing. If something happens, it was not consent
- WithdrawalHow they ask for removal, and how fastConsent withdrawn means removed, not reviewed
- Where usedEvery place the image appearsThe list nobody keeps and everybody needs at exit
- Third partiesAgency, printer, platformIncluding material already published
- After leavingRemoved, or retained with a reasonThe commonest complaint in this area
Photographs are not sensitive data and they produce more complaints than most things that are, because an employee can see exactly where their face is being used.
The practical lesson in “Photographs, Directories and Internal Publicity” is that a record is useful only when its purpose, owner and lifecycle are clear. For teams researching employee monitoring for performance reviews, open the official page can add time and project context, provided collection is proportionate, access is limited and every consequential inference receives human review.
The internal directory
Generally defensible on legitimate interests: people need to recognise colleagues, particularly in a distributed organisation.
For a separate benchmark relevant to “Photographs, Directories and Internal Publicity”, consult the Gartner insider-risk resources. Use it to test purpose, data flow, retention, access and response procedures rather than substituting a generic checklist for the organisation’s actual records.
It should still be stated in the notice, and there should be a route for somebody with a genuine reason — a safeguarding concern, a history of harassment — to be excluded without having to explain themselves to a committee.
External use is different
A photograph on a public website, in marketing material or on a social account is a different purpose with a different reach.
Consent is the right basis here, and it is one of the few places in employment where consent genuinely works: the employee can refuse, nothing happens if they do, and the alternative is simply not using their image.
Which means the refusal must be real. If declining produces a conversation about team spirit, it was not consent and the processing has no basis.
Asking properly
Separately from the contract, at a point where refusing is easy, naming the specific uses.
A clause in the employment contract permitting use of the employee's likeness is not consent in any meaningful sense, and it is the arrangement most organisations have.
Withdrawal
Consent can be withdrawn. Where it is, the image comes down — from the website, the brochure, the social post — within a reasonable period and without negotiation.
Material already printed and distributed cannot be recalled, and saying so at the point of asking is honest. Material online can be removed and should be.
The list nobody keeps
Where is this person's image used?
Website, intranet, a case study, a conference slide deck, a printed brochure, three social posts, an agency's portfolio.
At exit somebody asks for removal and the organisation cannot answer because no list exists. Keeping one, per person, costs a line and resolves the commonest complaint in this area.
Group photographs
A team photograph where one person leaves and asks for removal.
Cropping, replacing or retiring the image are all available. Refusing on the grounds that others are in it is not a good answer, and the usual outcome of refusing is escalation over something that would have cost ten minutes.
The group photograph problem
Somebody leaves and asks for removal from a team photograph. Cropping, replacing or retiring it are all available, and refusing because others appear in it is how a ten-minute task becomes an escalation.
Consent that is actually refusable
If declining produces a conversation about team spirit, it was not consent and the processing has no basis. External use is one of the few places in employment where consent genuinely works, provided refusal is free.
Where is this person's image used. Website, intranet, a case study, a brochure, three social posts, an agency portfolio. At exit somebody asks and nobody can answer.
Withdrawal means removal
Not review. Material online comes down within a reasonable period; material already printed cannot be recalled, and saying so at the point of asking is the honest version.
Internal against external use
A directory is generally defensible on legitimate interests. A public website or marketing material is a different purpose with a different reach, and consent is the right basis there.