Photography Law and Ethics: A guide for photographers and subjects

As a part of every workshop, course, and project we do at Luminary, one of the very first things we discuss is photography law and ethics. We believe it is vital that everyone we work with understands consent, both as a photographer and as a subject.

Having a clear grasp of the legal implications of the photographs you take, alongside the ethical considerations involved in capturing them, is why we take the decision to teach this before we start anything else.

Public Spaces: The Legal Reality of the “Right to Shoot”

As the law stands in the UK, you do not need consent to take photographs of people on public land; this includes children. You also do not need permission to publish those images.
Nobody else can claim ownership of those images, even if they are the primary subject in the photograph, nor can they dictate the usage of those images.

Understanding Copyright

In the UK, the copyright of a photograph belongs entirely to the photographer from the moment the shutter is clicked. Under the Copyright, Designs and Patents Act 1988, this protection lasts until 70 years after the photographer dies, at which point the work enters the public domain. The only structural exception to this rule is employment law, where a photographer has been working as an employee for someone else (a company, for example), the copyright typically belongs to the employer.

This freedom from requiring strict consent is a cornerstone of our society. It helps to maintain the freedom of the press and protects the ability of the government and businesses to utilize CCTV (although for most businesses, CCTV operation is strictly regulated by the Information Commissioner’s Office).

Where the Legal Line is Drawn

While the public baseline is generous, the law imposes strict boundaries when it comes to privacy, safety, and harassment.

  • The Contextual Data Boundary (UK GDPR): A photograph of an anonymous face in a crowd generally falls outside data protection rules. However, under the UK General Data Protection Regulation (UK GDPR), an image becomes regulated “personal data” if the subject can be actively identified. This happens when the image provides further identifying information, such as showing exactly where they live, or capturing them outside their private home.
  • Reasonable Expectation of Privacy: You cannot use a public vantage point to intentionally peer into a private space (like a bedroom, medical facility, or fenced garden) where a person has a “reasonable expectation of privacy” under the Human Rights Act 1998.
  • Prohibited and Private Locations: Certain spaces are completely excluded from public photography rules. Ministry of Defence (MOD) sites, such as military bases, heavily restrict filming and display clear “no photography” signage. Furthermore, on privately owned “quasi-public” land (like shopping malls or railway stations), landowners have the right to ask you to stop shooting.
  • Police Obstruction: The legalities of photography in public spaces are often misunderstood, sometimes even by police forces, who over the years have ended up in court because officers unlawfully wiped memory cards or confiscated cameras. While this confusion can lead to aggressive exchanges from people who think they know the law, the fact remains: no one has the right to force you to delete your images on the spot without a formal court order.
Street Photography Legal and Ethical

Our Approach

However, ethically we need to consider: even if we don’t legally need consent, should we ask for it anyway?

In the last decade or so, there has been a huge rise in ‘street photography,’ with professional and amateur photographers alike taking photos in public without the subject being aware. At Luminary, we understand that in certain situations it may not be possible to get immediate consent (for example, if the person is far away in a landscape). However, we also believe that actively engaging with someone to take their photograph will usually lead to better, deeper photographs anyway.

As an organisation working closely with vulnerable people, we hold ourselves to a high standard. We ensure that we not only ask for consent, but we make sure everyone we work with truly understands the access they are giving. We openly discuss the potential implications that each distinct platform may involve, whether it is print, a website, or social media and we always honour the right to repeal consent at any time.

Editing, AI, and Fake Content

Another massive consideration we must navigate is the editing of images. What was once coined the phrase “Photoshopped” has now been exacerbated further by the rise of Generative Artificial Intelligence (AI).

We believe that if you are editing images to change the physical look of a person, even something as simple as removing blemishes, cleaning up skin, or removing spots, you need to ensure that the person in those images consents to that being done.

With Generative AI, the ethical considerations multiply:

  • Data Scrape and Reuse: Uploading a client’s or subject’s portrait to online AI tools risks having their likeness scraped, harvested, and reused by tech platforms without control.
  • Artificial Alteration: Over-processing images to make real people look otherworldly, artificial, or heavily synthesized detaches photography from its human element.
  • Deepfakes and Exploitation: This technology takes on a sinister consideration when images are maliciously reused to create fake content using your subject’s face.

The legal framework is rapidly moving to combat this. Under current UK law (amended by the Data (Use and Access) Act), it is a strict criminal offence to intentionally create, or even request the creation of, non-consensual AI-generated or manipulated intimate deepfakes of an adult. If a person under 18 is depicted, it is treated under severe child protection laws regardless of whether the image is real or entirely synthetic.

Summary of UK Photography Legal Rules

To alleviate confusion and provide a reliable resource you can point people to, here are the core legal rules governing photography in public spaces across the UK:

  • The Freedom to Shoot: You have a legal right to photograph any person, child, or building from a public space. You do not require their permission to publish the work, and the copyright belongs solely to you for your lifetime plus 70 years.
  • The Deletion Law: Neither citizens, security guards, nor police officers possess the legal authority to force you to delete your images or confiscate your equipment without a court warrant.
  • The Trespass Boundary: If you are on private or ‘quasi-public’ property (like a train station or shopping centre) and an owner or security guard asks you to stop shooting, you must comply. Refusing to leave transforms you into a civil trespasser.
  • The UK GDPR Identity Rule: A photograph of a face only triggers data protection laws if the individual can be actively identified through it. Contextual clues, such as a subject standing directly outside their home or wearing a visible company name badge, are what bridge that gap.
  • The Privacy Lawsuit Risk: Photographing someone who has a ‘reasonable expectation of privacy’,such as looking through a residential window with a telephoto lens. leaves you legally exposed to civil lawsuits for breach of privacy.
  • The Criminal Threshold: Photography crosses from a right into a criminal offense if it involves targeted harassment (Protection from Harassment Act 1997) or the creation/dissemination of non-consensual intimate AI deepfakes and manipulated images.