Taking and displaying pupil photos and information

There are no hard and fast rules under UK GDPR on displaying pupil photos or other information, but you must have a 'lawful basis' for using personal data, and seek consent where necessary. Use our practical examples to work out how to stay compliant in your specific circumstances.

Last reviewed on 7 June 2023See updates
School types: AllSchool phases: AllRef: 34588
Contents
  1. Work out your 'lawful basis' for displaying the data
  2. When you don't need consent
  3. When you do need consent
  4. Always consider the safeguarding risks 
  5. Only display the necessary information

Work out your 'lawful basis' for displaying the data

Personal data you display about your pupils on the walls of classrooms, offices or medical rooms might include pupils': 

  • Names
  • Photographs or videos
  • Targets
  • Test results
  • Characteristics

When you do need consent You'll need consent if none of the other lawful bases can justify the task. For example, if you want to display personal information in a more public context or to promote the school, such as

The Key has taken great care in publishing this article. However, some of the article's content and information may come from or link to third party sources whose quality, relevance, accuracy, completeness, currency and reliability we do not guarantee. Accordingly, we will not be held liable for any use of or reliance placed on this article's content or the links or downloads it provides. This article may contain information sourced from public sector bodies and licensed under the Open Government Licence v3.0.