A photograph taken at a school event is not automatically ready for an admissions advertisement. Before publishing, check the intended use, everyone who can be identified in the image, the relevant permissions and the agencies or platforms that will receive a copy.
This guide gives school owners, admissions teams and IT leads a practical review process. It is a preparation tool, not a substitute for advice about the applicable law and your school's circumstances.
1. Describe the campaign before selecting photos
Write down where the image will appear: a school prospectus, website, social post, paid advertisement, hoarding or video. Note whether an agency will receive it, the proposed campaign period and the person responsible for approvals. A photo intended for a private parent gallery may need a fresh assessment before it is used in public advertising.
Avoid vague descriptions such as “all school purposes”. A parent should be able to understand the proposed use and its audience. Have the school's adviser review the notice, legal basis and consent process for the particular campaign.
2. Look at the whole image, not just the featured child
Check the background, reflected screens, name badges, uniforms and noticeboards. A photograph may identify several children even when only one is the focus. Names, class details, achievement information, health information or a sensitive school setting can increase the privacy impact.
Ask the admissions lead: does the campaign actually need identifiable students? A picture of an empty classroom, a close-up of unidentifiable work, or an illustration may communicate the idea with less personal data. Blurring or cropping can help, but check whether a student remains identifiable from the surrounding context.
3. Check records for the proposed use
For each identifiable student, check the school's current permission and restriction records against the specific planned channel and use. Confirm who is authorised to make decisions for the child, how the record was obtained and whether there is a later change or unresolved request. Do not assume that a general admissions form, attendance at an event or permission to share with parents covers a public advertisement.
If a record is missing, ambiguous or conflicts with a parent's latest instruction, hold that image while the school checks. Do not publish first and look for the paperwork later. Use an alternative image if the campaign must proceed.
4. Use a small approval register
Keep the register in a restricted school system. Use an internal image reference instead of attaching a full student list to a vendor email. Record only the information the reviewers need.
| Check | Example entry |
|---|---|
| Image reference and proposed use | IMG-014; website admissions banner |
| Review of identifiable people | Background checked; no unresolved identity questions |
| Permission or restriction record | School record reference checked; no conflicting request identified |
| Channels and dates | Website banner; review at campaign end |
| Agency access | Named agency contact; approved transfer; access review date |
| Decision and owner | Approved or held; admissions lead; date |
The examples are a suggested operating record, not a prescribed government form. Do not put passwords, health details or photographs in the register unless the school has a specific reason and appropriate safeguards.
5. Give the agency only what it needs
Agree in writing which files the agency can use, the approved channels, whether subcontractors may receive them, how long access lasts and how the school can request removal from agency-controlled locations. Use school-approved transfer methods and restrict editing and download access where the tools allow it. Keep a school-controlled copy of the approved creative and a list of places it was published.
Do not promise a parent that every third-party copy can be retrieved. If an image is printed, shared or reposted, the school's ability to remove copies may be limited. Explain the practical limits honestly and seek advice about the correct response.
6. Plan for a change of preference
Give parents a clear contact and route for raising a question or withdrawing consent where applicable. Assign someone to acknowledge and assess requests, stop future use where appropriate, and coordinate the website, advertising account and agency. Track printed material and third-party copies separately; seek legal advice where the appropriate action or timing is unclear. Our parent preference change workflow offers a practical starting point.
Before launching, do one final check: the approved file matches the permission record, captions do not add unnecessary information, the campaign owner knows the channels, and the agency has only the access it needs. For event-specific preparation, see the annual-day photo checklist and photographer handover checklist.
How does this relate to India's DPDP framework?
The Digital Personal Data Protection Act, 2023 and notified DPDP Rules, 2025 have phased commencement. The rules' education-related exceptions have conditions; a school should not assume that a promotional campaign is covered simply because the photograph was taken at school. Confirm current commencement, the nature of the image, purpose, applicable exceptions and lawful basis with an adviser. The steps above are practical recommendations and are not each separately prescribed by the Act.
MediaGuard may help schools organise media workflows; discuss the school's requirements and confirm the product's actual capabilities and integrations. Broader readiness can involve school teams, advisers and implementation partners.
What does this mean for your school?
Turn the guidance into a practical plan for your school, from policies and staff to parent permissions and media.
