Do you need consent to use employee photos on your website?

Do you need consent to use employee photos on your website?

Yes. In almost every case you should get written consent before you use a photograph of a member of staff on your company's website, in marketing content, or on social media. A signed photo release names the intended use, records an affirmative signature, and gives the person a clear way to withdraw permission later. That protects their privacy and shields your organization from claims over misuse of personal information or image rights.

Below is what to include, when consent is required, how staff can revoke it, and what to do when a photograph shows more than one person.

Why does consent matter?

Using someone's image without permission can expose your organization to real risk. The most common issues in the United States are:

• State privacy and publicity rights. Many states protect a person's right to control how their name and likeness are used. Ignoring that can lead to fines or lawsuits.
• Discrimination and harassment claims. If a photograph is used in a way that unfairly targets people based on protected characteristics, or contributes to a hostile work environment, it can trigger a complaint.
• Disclosure obligations. If your company is publicly traded, the Securities and Exchange Commission requires certain disclosures in filings and communications, which can extend to how employee images are used.

There is no single federal statute that governs employee likeness across the country, so an employer has to work with a patchwork of state privacy and publicity laws. That makes clear, documented consent the safest position wherever your staff and customers are based. It records that the person understood how their photograph would be used and agreed to it.

How do you obtain proper consent?

Document the agreement through a photo release form, or a clause in the employment contract or handbook. A written release is stronger than a verbal one because it names the use and captures a signature you can rely on later.

A well-drafted photo release form should include:

• A clear statement of the intended use of the photograph (for example, the company website, marketing materials, or social media).
• A statement that the employee understands and agrees to that use, including how the image and any related personal data will be stored.
• A signature line for the employee to sign and date.
• A named contact and a route for the employee to withdraw consent at any time.

Consent has to be voluntary. Staff should be free to decline without any fear of retaliation, and declining should carry no negative consequence at work or to their career.

If you need a starting point, GenieAI offers customizable templates you can adapt to your own policy and jurisdiction. Browse the full template library or set up the release as part of your employment contract so permission is captured at onboarding. For staff who are leaving, capture the same permission in your employment separation agreement so you know which images you can keep using.

Is email consent valid?

Email consent can be valid, but it is not the most reliable approach. Consent should be clear and affirmative, and a short reply email may not meet that standard. An email thread also gets messy to search when you need proof months later. A signed release lets you set out the exact use, take an affirmative signature, and keep organized records in one place.

Can employees revoke consent?

Yes. Staff can withdraw permission for the use of their photograph or personal data at any time, and privacy law treats consent as an ongoing choice rather than a one-off. If someone revokes it, stop using their image as soon as you can and remove it from live pages and marketing content.

Set up a simple, named process for withdrawing permission and act on requests promptly. When a request comes in, HR or your resourcing team should have a clear checklist to follow so nothing is missed. Continuing to use a photograph after someone has revoked consent can breach privacy law and damage trust across the team. Updating your records each time someone joins, leaves, or changes their mind keeps the whole set current.

What if a photograph includes other people?

If a photograph shows other employees or non-employees, get written consent from each identifiable person before you use the image. A release form lets you document everyone's permission. If a customer or client appears in a photo taken at your premises or an event, ask for their sign-off too. For photographs taken at public events or locations, you may not need consent for incidental appearances in the background. If you are unsure about a group photo, treat the safest option as getting each identifiable person's sign-off.

Best practices for using employee photos

To keep risk low and maintain a respectful workplace, follow these steps whenever you use employee photographs online or in public-facing materials:

• Obtain written consent using a clear, specific photo release form.
• Name the exact use so the person knows where their image will appear.
• Give staff a straightforward way to withdraw consent, with a named contact.
• Use images professionally, avoiding anything that could look discriminatory or create a hostile work environment.
• Review and update your policy and records regularly as your team and the law change.

Don't skip the paperwork just because a shot is already live. If you find an old image you can't tie to a signed release, ask the person again and record their answer. Handled this way, you can showcase your people and your company culture while respecting their privacy.

At GenieAI, we make it easy to draft and review the documents behind these decisions, from photo release forms to employment agreements, so your team can get the paperwork right without waiting on outside counsel.