Photo Consent Form South Africa: POPIA, Image Rights, and Children's Act

Any South African organisation that photographs or films people — whether for marketing, events, education, or social media — is processing personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). A photograph or video that identifies a person is personal information. Photographs of faces may also constitute biometric information, which receives heightened protection under POPIA. A properly drafted photo consent form is how you document the legal basis for that processing.

When Is Consent Required Under POPIA?

POPIA requires a lawful basis for processing personal information. For photos and videos of identifiable individuals, the primary basis is consent. Consent under POPIA must be:

• Voluntary: not coerced or made a condition of participating in an event if the processing is not necessary for participation
• Specific: the person must know what they are consenting to — "general photography" is insufficient for commercial use
• Informed: the person must understand how the images will be used
• Unambiguous: the consent must be clearly expressed (a checkbox, signature, or written confirmation — not assumed from silence)

The Biometric Information Angle

Section 26 of POPIA classifies biometric information (information collected about a person's physical characteristics, including facial recognition data) as a special category requiring express consent. Where you use facial recognition software to identify participants at events, or where photos are processed by AI systems for identity purposes, you are processing biometric information and need express written consent.

For standard event photography (photos used for marketing without any automated processing), ordinary POPIA consent is sufficient, but it must still be documented.

Children's Act: Additional Requirements for Minors

The Children's Act 38 of 2005 provides that a child's personal information (anyone under 18) receives special protection. Key requirements when photographing minors in South Africa:

• Consent must be obtained from a parent or legal guardian
• The consent must cover the specific use (school newsletter, social media, marketing material)
• Schools, NGOs, and sports clubs must have a standing photo consent process for all enrolled children
• Even with parental consent, POPIA requires that the processing be in the child's best interests

For organisations working with children, it is best practice to obtain annual consent at enrolment or registration, clearly describing all potential uses (website, social media, printed materials, press coverage).

Commercial vs. Non-Commercial Use: Different Risk Levels

Commercial Use

If a photograph of an identifiable person is used to sell products or services — in advertising, on packaging, in promotional videos — you are using their likeness for commercial gain. In addition to POPIA consent, this raises common-law personality rights (the right to control how your likeness is used commercially). The consequences of using someone's image commercially without consent include:

• A claim for damages under the actio iniuriarum (invasion of dignity and personality)
• An urgent interdict to stop the unauthorised use
• A complaint to the Information Regulator under POPIA

Editorial and News Use

Photographing people in public places for editorial or news purposes (a newspaper, a news website, documentary content) generally does not require prior consent, but must not be used in a manner that violates the subject's dignity or that is misleading.

Internal and Organisational Use

Photos taken at a company function, school sports day, or community event and used in an internal newsletter or on a private intranet typically require basic consent but carry lower risk than commercial use.

What a SA Photo Consent Form Must Include

1. Parties

• Name and contact details of the organisation obtaining consent
• Name of the person consenting (or parent/guardian if a minor, with the child's name)
• ID or date of birth (especially for minors)

2. Description of the Media

Specify exactly what will be captured:

• Photographs only, or also video and audio
• Whether the images may be processed by automated systems (AI tagging, facial recognition)

3. Specific Uses

List how the images will be used:

• Organisation website
• Social media platforms (specify which)
• Printed marketing materials
• Press releases and media
• Internal communications only
• Third-party licensing (if you may sell or license the images to others)

Consent is specific to the stated uses. If you later want to use the images in a new way, you need fresh consent.

4. Duration

State whether consent is:

• For a specific event only
• Ongoing until revoked
• For a defined period (e.g., two years)

5. Right to Revoke

POPIA Section 11(3) gives data subjects the right to withdraw consent at any time. Your form must acknowledge this right and explain the process for withdrawing consent (email the Information Officer, for example). Note that withdrawal does not affect processing already done in good faith before the withdrawal.

6. No Compensation

If no payment is being made (which is typical for general event photography), state this clearly so there is no expectation of compensation.

7. POPIA Information Officer Contact

Include the name and contact details of your organisation's Information Officer, as required by POPIA.

Electronic Consent

An email reply, a checked box on a website, or a WhatsApp confirmation can constitute valid POPIA consent in South Africa under the Electronic Communications and Transactions Act. For higher-risk commercial uses, a signed document is preferable because it is harder to dispute.

Practical Tips for SA Organisations

• Schools and sports clubs: Use an annual enrolment consent form that covers all ordinary photography for the season
• Event promoters: Include a photo consent clause in your event ticketing terms (and display a notice at the venue entrance for non-ticketed events)
• NGOs and social development organisations: Be especially careful with images of vulnerable adults and children — internal review before publishing is good practice
• Marketing agencies: Always retain proof of consent from the brand's end client before using any identifiable person's image

Related Guidance

• Explore related guides: Blog hub
• Use our free tools: Free Tools

Official References

• POPIA Act 4 of 2013 - www.gov.za
• Children's Act 38 of 2005 - www.gov.za
• Information Regulator SA - www.inforegulator.org.za

Last Reviewed

Last reviewed: 2026-03-03. This article is informational only - verify requirements with official sources before acting.