Every term, millions of children across the country smile for a camera held by a teacher or a communications officer, and within hours their faces appear on school websites, Facebook pages, and Instagram grids. It feels wholesome. It feels normal. But in 2026, a sharper question is cutting through that comfortable routine: who else is seeing those images, and what are they doing with them?
The Habit Nobody Questioned
Schools posting photos of their pupils online became standard practice almost by accident. As social media grew into the dominant communication tool of the 2010s, schools followed parents, businesses, and celebrities onto those platforms. Sharing a photo of the Year 4 nativity or the under-11s football squad felt like good community relations. Parents liked it. Governors praised it. Local newspapers reprinted it.
Nobody really stopped to ask the harder questions. Not loudly, anyway. But those questions have always been there, waiting for the moment the culture caught up with the technology.
That moment appears to be arriving. A BBC examination of the issue is now pulling the topic into mainstream conversation, asking what risks children genuinely face when their faces, names, year groups, and locations are published online by the very institutions entrusted with their care.
The Problem With a Permanent Record
Here is the uncomfortable reality. A photo uploaded to a school’s public Facebook page is not tucked away in a family album. It is indexable, shareable, downloadable, and permanent in a way that analogue images never were. Once an image is online, the school effectively loses control of it.
Facial recognition technology, which was once the preserve of intelligence agencies, is now embedded in consumer apps that anyone can download on a smartphone. A photo tagged with a child’s full name, their school, and their age group is not just a picture. It is a data profile. And data profiles have value, which is precisely why the wrong kind of person might want one.
Child protection experts have raised consistent concerns about what they call the aggregation problem. A single photo is probably harmless. But a school that posts photos regularly, tags pupils by name, mentions the school’s location in every caption, and geotags its posts is building a detailed, searchable record of where specific children are, what they look like as they grow up, and when they can be found in predictable places. That aggregated picture is far more dangerous than any individual image.
Consent Is More Complicated Than a Signed Form
Most schools ask parents to sign a photo consent form when a child enrols. It is usually a single checkbox buried in a stack of admission paperwork. Parents tick it because everyone ticks it, and because refusing feels awkward, as though you are the suspicious one.
But consent law, particularly under frameworks built around children’s data, requires more than a signature on a form years before the image is taken. It requires informed, specific, and genuinely voluntary agreement. Asking a parent to blanket-consent to all future photo use at the moment they are most eager to please the school they have just chosen for their child does not meet that standard in any meaningful sense.
Children themselves almost never get a say. A teenager photographed at twelve has no real opportunity to object to an image that may still be findable online when they are twenty-five and applying for jobs. The digital footprint is laid down long before the child has the capacity to understand or control it.
What Schools Are Getting Wrong
The issue is not that schools are malicious. The vast majority of educators who post photos are doing so with genuine warmth and good intentions. The problem is structural. Schools receive almost no practical training on image governance. Their social media policies, where they exist at all, tend to be written by governors or admin staff without specialist knowledge of data protection or child safeguarding in digital environments.
Many schools still post photos showing pupils’ full names in the caption, identifiable school uniforms with the school’s name embroidered on them, and location data attached to the image file itself. Each of those details alone is minor. Together, they hand a stranger a precise and current picture of a real child’s daily life.
The Platforms Carry Responsibility Too
Social media companies have long argued that they are neutral platforms and that content moderation is not their core responsibility. That position is becoming harder to sustain. When a school uploads a photo of a ten-year-old to a commercial platform, that platform’s algorithm immediately begins using that image to train its systems, personalise feeds, and potentially make the image discoverable to accounts far beyond the school’s followers.
Meta, for instance, has faced repeated scrutiny over how its platforms handle images of minors. Despite policy changes and parental supervision tools, a public post on a school’s Facebook page remains accessible to anyone with an account, which is to say, almost anyone on earth.
What Better Practice Actually Looks Like
Some schools are already adapting. Password-protected parent portals, closed WhatsApp groups with strict membership controls, and internal newsletters distributed as PDFs rather than public blog posts are all gaining ground as alternatives to open social media publishing.
The most thoughtful schools have also started treating image consent as an ongoing conversation rather than a one-time administrative task. They ask for annual consent renewals, allow parents and older pupils to opt out of specific types of publication, and keep a clear internal record of which children must never appear in any externally shared content, because some families have very specific reasons for staying invisible online.
These are not radical changes. They are simply the result of taking child safety seriously in a digital context, applying the same instinct that would stop a school from handing a stranger a list of its pupils’ names and home addresses.
A Generation That Deserves Better
The children being photographed today will grow into adults who will have opinions, careers, relationships, and reputations to protect. Many of them will also develop a sophisticated understanding of digital privacy that the adults currently photographing them do not yet have. The least those adults can do is make careful decisions now that preserve future choices rather than foreclose them.
There is a version of this where schools continue to celebrate their communities online. There is nothing wrong with that impulse. But celebration should not come at the cost of safety, and right now, for too many schools, it quietly does.
So here is the question worth sitting with: if your child’s school asked you today, with full transparency about every platform the image might reach and every way it could be used, would you still click yes?
