Construction Photo Consent in the UK: What Builders Need
Understand the legal requirements for construction photography in the UK, including when photos become personal data and how to manage client consent effectively.
By James Shorter ·
Construction Photo Consent in the UK: What Builders Need

Most of the time, a UK builder does not need written consent to photograph a job. You do need a lawful basis, a clear reason for taking the photos, and a way to look after the ones that show people. Consent becomes the right answer in a few specific cases: marketing images, shots inside a private home, and anything that features a recognisable person.
This guide sets out where the line sits, what to tell workers and clients, how to handle objections, and how to store site photos so you can defence them if a dispute starts.
TL;DR
- Photos of a building or works are not automatically personal data. A photo becomes personal data when it shows an identifiable living person.
- For progress records, safety and dispute protection, most firms rely on legitimate interests, not consent. You must document that decision.
- Ask for consent before using photos publicly, such as on your website or social media, and before photographing inside a client’s home for anything beyond the job record.
- If someone objects or asks for deletion, you need a process. The ICO sets out when the right to erasure applies.
- Keep photos against the right project, limit who can see them and set a retention period. Do not keep personal data forever.
Table of Contents
- Do you need consent to take photos on a construction site?
- When does a site photo count as personal data?
- Which lawful basis should you use?
- What to tell workers, clients and visitors
- Marketing and public use: ask first
- Storing, sharing and keeping site photos
- What to do if someone objects or asks for deletion
- Perspective: keep the record, minimise the people
- Keep site photos organised with BRCKS
- A short checklist for your next job
- FAQ
- Sources
Do you need consent to take photos on a construction site?
Short answer: usually not, for ordinary site records.
Two separate questions get mixed up here. The first is whether you are allowed to take a photograph. The second is what you may do with it once it contains personal data.
On the first, UK law does not prevent photography in public places, and nobody has a general right to make a photographer delete lawfully taken images, according to Avon and Somerset Police. Government guidance on copyright also treats photographs of buildings and public works in public spaces as the photographer’s own work, so no permission is generally needed to photograph them.
That covers the outside of a building seen from the street. It does not cover your own site, a client’s home or a private interior. There, access is by invitation, and the rules that matter are the contract, the client’s wishes and data protection.
On the second, the question is whether the photo relates to an identifiable person. If it does not, data protection law has little to say. If it does, you are processing personal data and you need a lawful basis.

Photos inside a client’s home
There is no general right to privacy in UK law, but the European Convention on Human Rights gives a right to respect for private life and home. In practice, contractors should treat photographing inside a private residence as something to agree with the householder first. That sounds obvious, but it is easy to forget when a trade snaps a photo of a bedroom or a family’s belongings to explain a problem.
The simple fix is to write it into your terms or your start-of-job paperwork. Say that you will photograph the works for record, quality and dispute purposes, and say who sees the photos. Then you are not relying on a casual chat on day one.
When does a site photo count as personal data?
The ICO defines personal data as information relating to an identified or identifiable individual. Its guidance for small organisations lists photographs as an example, and notes that data protection law applies to living individuals only.
On a building site, that means the following.
| Photo content | Personal data? | What to do |
|---|---|---|
| Blockwork, first-fix wiring, a leaking joint | Usually no | Store against the project. No consent needed |
| A subbie working, face visible | Yes | Lawful basis, tell the person, limit access |
| A client’s family photos on a wall behind the work | Possibly | Reframe or crop. Keep the photo internal |
| A house number or a visible address | Can be, when linked to an occupant | Treat as personal data when it identifies a household |
| A van registration in the background | Can be | Crop before any public use |
The test is not whether you meant to capture a person. It is whether someone could be identified from the image, alone or with other information you hold, such as the project name and a diary entry.
A good habit on site: frame the work, not the people. Take the photo of the defect, not of the person standing next to it. That one habit removes most of the problem.
Which lawful basis should you use?
Before you collect or use images that contain personal data, the ICO says you must identify and document a valid lawful basis under Article 6 of the UK GDPR. The guide was last updated on 2 April 2026.
For a construction firm, two bases matter most.
Legitimate interests for site records
Progress records, safety, security, quality checks and protection against disputes are all reasonable business purposes. Most firms rely on legitimate interests for this. The ICO’s approach is a three-part test, which you should run through and write down:
- Purpose. What exactly are you photographing for? For example: evidence of work before it is covered up, snag records, variation evidence.
- Necessity. Could you achieve it without photographing people? Usually yes, by framing the work.
- Balance. Would the people in the photo reasonably expect it, and does it harm them? A worker photographed doing the job on a site they know is recorded is very different from a neighbour photographed in their garden.
Write the answer in a short note. Accountability means you must keep records that demonstrate your compliance. A half-page legitimate interests assessment, dated and filed with the project, does that job.
This is where a site record helps. When photos, diary entries and decisions sit against the same project, you can show what was captured, when and why. Our guide to construction progress photos covers how to take records that stand up in a dispute. If you want to document the procedures around images and compliance more broadly, a site diary module is one way to keep that written trail together.
Consent for anything beyond the job
Consent gives people control, including the right to change their mind. The ICO notes that in some cases it may not be the most appropriate basis. That is exactly why it is a poor fit for core site records: if a worker could withdraw consent on a Friday, you would have a gap in your project record when you need it most.
Use consent where the use is optional and the person has a real choice:
- Photos of people for your website, brochures or social media.
- Photos of a client’s home used as a case study.
- Anything where a recognisable person is the point of the picture.
If you are not sure which basis applies, ask your insurer, a solicitor or the ICO’s small business helpline before you build a process around it.
What to tell workers, clients and visitors
If you rely on legitimate interests, you still have to tell people. A privacy notice should be in plain English, speak to the group reading it, and state the purposes and retention periods. That source also describes a layered approach, with tailored notices for workers and site visitors.
In practice, three short pieces of wording cover most small and mid-sized firms:
- Clients. A paragraph in the contract or the welcome pack. We photograph the works to keep a progress and quality record. Photos are held against your project, visible to our team and the trades working on it, and kept for a stated period.
- Workers and subbies. A line in the site induction or subcontract. Site photos may show you at work. They are used for records, safety and dispute protection, not for marketing without asking you.
- Visitors and neighbours. A notice at the gate if you run cameras or regular photo surveys. Say who is responsible and where to ask questions.
Keep each to a few lines. If it needs a lawyer to read it, nobody will.
Marketing and public use: ask first
This is where consent does real work. A photo that is fine as an internal record may not be fine on your Instagram.
The Advertising Standards Authority advises marketers to take care not to feature the recognisable property of members of the public without permission. A finished kitchen with the owner’s home visible, a distinctive front door or a street name is a recognisable property. The same applies to a person on the scaffold.
A workable process:
- Ask in writing before you publish. An email reply is enough, if it says what the photos are for and where they will appear.
- Name the channels. Website, social media and print are different uses. Do not take a yes to one as a yes to all.
- Tell people they can withdraw. Say how, and what you will do. Taking a photo down from your own channels is simple. Printed brochures cannot be recalled.
- Keep the permission with the project. If it is in an inbox, nobody will find it in two years.
- Crop or blur incidental detail: house numbers, car plates, children, family photographs.
For employees and subbies, do not make marketing use a condition of working for you. Ask and accept a no.
Storing, sharing and keeping site photos
Most photo problems start after the photo is taken. Pictures sit on personal phones, in WhatsApp groups and in camera rolls for years.
Good practice is straightforward. Limit access to personal data across site teams, set retention periods and do not keep personal data forever. Applied to photos:
- One home for the project. File photos against the job, not in a personal camera roll. Our guide to WhatsApp and GDPR for UK builders explains how to keep messaging useful without losing control of what is in it.
- Role-based access. The electrician does not need every photo of the client’s house. The project manager and the person who took the photo usually do.
- A retention rule. Pick a period that reflects business need, legal requirements and the nature of the project, and write it down. Your record-keeping obligations differ by document, so see our guide to UK construction record keeping before setting it.
- Sensible handover. Give clients the photos relevant to their home. Do not forward a whole project folder to a third party.
- Compliance photos. Photos that support CDM paperwork belong with those documents. Our note on CDM paperwork shows how the core files fit together.
What to do if someone objects or asks for deletion
It will happen eventually. A worker leaves on bad terms, or a client changes their mind about a case study. Have a short process ready.
- Log the request the day it arrives, with who asked, what they asked for and the date.
- Work out which basis applied. If the photo was used on consent, withdrawal means you stop using it. If it was used on legitimate interests, the person can object.
- Check whether erasure applies. The ICO says the right to erasure applies where someone objects to processing based on legitimate interests and there is no overriding legitimate interest to continue. It also applies if the data is no longer necessary for the original purpose.
- Delete properly. Erasure steps include live and backup systems, so check the project record and any copies in message threads and shared drives.
- Reply in writing. Say what you have done, or why you are keeping a photo. A live dispute or a defect claim can be a reason to keep evidence, but take advice before you rely on it.
The ICO’s page on the right to erasure is the one to read for timescales and exceptions. If a request involves a solicitor’s letter or an insurance claim, speak to your solicitor before you delete anything.
Perspective: keep the record, minimise the people
We built BRCKS because a builder with 20 years on site was tired of project facts living in WhatsApp threads, phone galleries and spreadsheets. Photos are the clearest example. They are the best evidence you have in a variation dispute, and the hardest thing to find six months later.
Our view on consent is practical. Do not ask every worker to sign a form for every photo. Decide your lawful basis, write it down, tell people plainly, and take photos of the work, not of faces. Ask properly when a photo leaves the project, for marketing or a case study.
The tools should make that easier. Teams keep messaging the way they already do, including through WhatsApp with a dedicated business number. BRCKS files the photos against the right project, so access, history and decisions sit in one searchable record. Subcontractors and clients are invited free, which means you can share what they need to see without sending a folder of everything.
Photos are only as defensible as the records around them. A date, a location and a note on what the photo shows will do more for you in a dispute than a hundred loose images.
— James
Keep site photos organised with BRCKS
BRCKS files site photos, site diaries, variations and decisions against the right project, and keeps them searchable in plain English. Photo-led checklists and snagging record the work without adding another app for the team. Pricing is £40 per seat per month billed annually, and subcontractors and clients are free. You can see the full detail on the pricing page, try our site diary app, or look at BRCKS for builders. Get BRCKS free for 14 days.
A short checklist for your next job
- Add a photo and privacy paragraph to your client contract or welcome pack.
- Add a line to the subcontract and site induction.
- Write a half-page legitimate interests note for site records, and date it.
- Agree where photos live and who has access.
- Set a retention period and diarise a review.
- Use a written permission for marketing, with channels named.
- Keep a log of objections and deletion requests.
FAQ
Can I photograph a client’s home without asking?
Treat it as something to agree first. UK law gives a right to respect for private life and home under the European Convention on Human Rights, so contractors generally need permission for interior photos. Put the purpose in your contract so the permission is on record.
Do I need written consent to photograph my own workers and subbies?
Not usually for site records. Most firms rely on legitimate interests, document the reasoning and tell workers in the induction or subcontract. Ask for consent where the use is optional, such as marketing, and accept a refusal.
Can I use progress photos on my website?
Only with care. Remove or blur people, house numbers and anything that identifies the home, and get the client’s written permission. The ASA advises taking care not to feature the recognisable property of members of the public without permission.
What if a client asks me to delete their photos?
Log the request and check which basis you relied on. If you used consent, stop using the photos. If you used legitimate interests, the right to erasure applies where they object and you have no overriding reason to keep them. Check live systems and backups, and take advice if there is a live dispute.
Is a WhatsApp photo covered by the same rules?
Yes. A photo showing an identifiable person is personal data wherever it sits. Keep site photos in a controlled project record instead of personal phones and open groups.
Sources
- Avon and Somerset Police: taking photographs in public places
- GOV.UK: copyright notice on digital images and photographs
- ICO: data protection principles, definitions and key terms
- ICO: a guide to lawful basis
- ICO: taking photographs, data protection advice
- ICO: right to erasure
- ASA: privacy, landmarks and property
- Sprintlaw: privacy rules for UK construction project managers
Recommended
- UK Client Sign-off Checklist & Legal Duties
- WhatsApp GDPR Rules for UK Builders
- Pre-construction for UK Stakeholders: CDM 2015 Guide
- Construction Progress Photos: Stop 40% of Rework
How BRCKS Can Help
Managing photo consent and site documentation doesn't have to be a legal headache for your firm. BRCKS simplifies this process by providing a secure, centralised platform where project photos and permissions are organised and easily accessible. By integrating these compliance steps into your daily workflow, BRCKS helps you protect your business while showcasing your best work. We invite you to explore how our software can streamline your site management and keep your digital records beyond reproach. Learn more at BRCKS and explore our full feature set.