In short: Before filming in a school, agree who is responsible for the footage, which lawful basis covers each use, and which pupils must not be shown. Consent must be specific, informed and easy to withdraw. Check the safeguarding lead's list on the day, keep names off published images, and store files securely.
Filming in a school starts with three questions for the school: what is the footage for, what is the lawful basis for taking and using it, and which pupils must not appear. Answer those in writing before the crew arrives and most problems never happen. This guide is general guidance, not legal advice. The school's data protection officer and designated safeguarding lead make the decisions for their own setting.
Why the rules apply
The Department for Education guidance is clear that an identifiable image of a pupil is personal data, so data protection law applies to it. The guidance lists uses such as newsletters, websites, prospectuses, social media, school trips, performances, sports days and classroom displays. Every photo or video needs a lawful basis before it is taken, used or shared.
The NSPCC adds the safeguarding view. Its page lists the risks as images being misused out of context or altered with AI, a child being identified for future grooming, and a vulnerable child being found by someone who has abused them before. Those risks are why schools take the process seriously, and they are why a polite crew follows it without complaint.
Pick the lawful basis for each use
The DfE guidance sets out three bases a school might use.
- Public task covers administrative uses such as ID cards, registers and seating plans.
- Consent must be freely given, specific, informed and unambiguous, and can be withdrawn at any time. Once withdrawn, the school must stop using the data and delete it, unless another lawful basis applies.
- Legitimate interests needs the school to weigh its interests against the individual's rights and carry out an assessment. Pupils and parents must have a clear way to opt out, both when the photo is taken and later.
For a school promo, social media clips or a virtual open day, the guidance notes that many schools collect specific consent for posting on social media. Pupils and parents should understand the wider sharing and the higher privacy risks.
One more point from the guidance: consent collected at the start of the year records preferences but may not cover every future use. A video montage or a film for a new audience may need fresh consent. If the film is new to the family, ask again.
Who consents
The DfE says schools often ask parents or carers, and that pupils can be asked directly once they can understand what is involved. It says that once pupils can understand how their images may be used, schools should consider asking them directly, which is often around age 13, and that schools should also consider safeguarding factors when deciding whether a pupil can give valid consent.
The NSPCC sets out its own approach. Children should be consulted and agree to their image being taken, used or shared. Under-16s also need parental consent before a photo or video is taken. For 16 and 17-year-olds, decide case by case whether parental consent is appropriate, and consider telling parents even where it is not needed. Where a child is separated from their parents, for example in care, consent should come from someone with parental responsibility, such as a carer or the local authority.
When you ask, explain the purpose, possible future uses, how long the images will be kept, and how consent can be withdrawn. Say that material already published is very hard to recall. Use written forms and keep records of who agreed, when, how and what they were told.
Pupils who must not be shown
The DfE says schools should not publish images of pupils who should not be publicly identified, such as those with safeguarding concerns or under court orders. If unsure, the school consults its safeguarding or data protection lead. The NSPCC adds that families may prefer no images for religious or cultural reasons, because a child is in care or has been adopted, or because of past abuse.
In practice, ask the school for a list before the shoot day, held by one named person who is on site. Do not ask why a pupil is on it.
If a pupil has not consented, the NSPCC says they must not be excluded from the activity. The usual fix is a sticker, badge or wristband, agreed in advance so the child is not singled out, so that everyone filming knows who to avoid. Brief every operator on it before the first take.
Brief the crew
The NSPCC recommends a clear written brief for any professional photographer, limiting images to specified purposes and only to children who have consented. The same applies to a film crew. A short brief should cover:
- The purpose of the film and where it will be published.
- The list of pupils who must not be shown, and how they are identified on the day.
- Where the crew may and may not film, and who escorts them.
- Whether pupils are named. The NSPCC advises not supplying children's names with images.
- How files are transferred, stored and deleted.
On the day, favour wide shots and the activity over faces of individual children. The NSPCC's good practice includes focusing on the activity rather than the child, using distance shots, avoiding images open to misinterpretation and disguising identifying details such as uniform badges or signs. Where a close-up is needed, it suggests side-on angles.
Handle the files properly
The DfE guidance says photos from school cameras should be moved to a secure school server as soon as possible, and that the contract with an external photographer should say who is responsible for data protection. The NSPCC advises using organisation accounts rather than personal ones for sharing and live streaming.
For publication, the NSPCC suggests removing location data and metadata before uploading, and reducing image resolution. It also recommends reviewing website and social media content and privacy settings regularly.
Agree a retention date at the start. The DfE recommends that schools publish a clear photo and video policy alongside the privacy notice, explaining how images are used, where they are published and how long they are kept. A film that has no end date has no end plan.
Live streams and recorded events
If the school is streaming a concert, assembly or open day, the NSPCC says a photography and filming policy should be shared with parents and carers beforehand, setting out the rules on photos, video and livestreams. Use organisation accounts rather than personal ones, check privacy settings and consider restricting access. For recorded online sessions, it advises a written policy on storage, retention, disposal and access, written consent, and checks before each session that children are comfortable being recorded.
Parents filming a nativity for the family album is a different matter. The DfE says data protection law does not usually apply to photos taken for personal use. Schools can ask parents to remove an image shared publicly if it raises privacy or safeguarding concerns.
When consent is withdrawn
The DfE says schools should handle withdrawal requests sensitively and in line with safeguarding policies. If a pupil appears in a video, the DfE says to consider whether the footage can be re-edited or needs to be withdrawn entirely. Agree in advance who can make the edit. A crew that has delivered a master file and moved on is not much use to a head teacher on a Friday afternoon.
What a school should have in place
- A written photo and video policy, published with the privacy notice.
- A consent form with separate boxes for each use.
- A named person holding the do-not-film list.
- A signed brief with any outside crew, including who is responsible for the data.
- A route for withdrawing consent that parents can find.
For the wider picture, see filming people: UK GDPR, consent and when you need a release, and ethical storytelling on asking people to share their stories. If you are planning the film itself, making a school promo video covers the production side, and video for independent schools shows what we make for schools. Staff and governor interviews can be recorded in one controlled space: see studio hire.
Sources
- GOV.UK, Department for Education, Data protection in schools: taking and using photos and videos, and using CCTV in schools (last updated 14 October 2026), read 5 November 2026
- NSPCC Learning, Photographing and filming children (last updated 9 July 2026), read 5 November 2026
Related guides
The picture at the top of this page is an illustration, not a photograph of a client or a real job.
Questions we get asked
Do schools need parental consent to film pupils?
Not always for every use, but a school needs a lawful basis before it takes or uses any identifiable image. Consent is one option, and the Department for Education says many schools collect specific consent before posting on social media. The NSPCC says under-16s need parental consent as well as the child's own agreement.
Who is responsible for the footage when an outside film crew visits?
The contract should say. The Department for Education guidance says that when a school uses an external photographer, the contract should clearly define who is responsible for data protection. Agree this in writing before the shoot day.
What happens if a parent withdraws consent after the video is online?
The DfE says the school must stop using the person's data and delete it, unless another lawful basis applies. In practice that means removing the image from the website, social media and future materials. Anything already printed and distributed cannot be recalled, so say so in the original request.
granary.digital · 01243 884993 · studio@granary.digital · The Old Grainstore, Adsdean, Chichester, West Sussex, PO18 9DN · Prices exclude VAT unless marked inc VAT