Taking and displaying pupil photos and information

There are no hard and fast rules under UK GDPR on displaying pupil photos or other information, but you must have a 'lawful basis' for using personal data, and seek consent where necessary. Use our practical examples to work out how to stay compliant in your specific circumstances.

Last reviewed on 7 June 2023See updates
School types: AllSchool phases: AllRef: 34588
Contents
  1. Work out your 'lawful basis' for displaying the data
  2. When you don't need consent
  3. When you do need consent
  4. Always consider the safeguarding risks 
  5. Only display the necessary information

Work out your 'lawful basis' for displaying the data

Personal data you display about your pupils on the walls of classrooms, offices or medical rooms might include pupils': 

  • Names
  • Photographs or videos
  • Targets
  • Test results
  • Characteristics

When you do need consent You'll need consent if none of the other lawful bases can justify the task. For example, if you want to display personal information in a more public context or to promote the school, such as