Photos are the heart of good care home social media. They are also where most of the risk sits. A photo shared without proper consent can upset a resident and their family, damage trust in your home, and break data protection law.
The good news: a simple, consistent routine covers almost everything. This guide explains it in plain English. It is general guidance for homes in the UK, not legal advice; check your own policies and, if you’re unsure, speak to your data protection lead.
The short version
Why consent matters
A photo of someone who can be recognised is personal data under UK data protection law. In a care home, a photo can also hint at someone’s health or that they receive care, which deserves extra care.
For social media, consent is the clearest basis. To count, consent must be:
- Freely given: no pressure, and saying no changes nothing about the person’s care.
- Specific: it says what you’ll use the photo for and where (Facebook, Instagram, your website, a newsletter).
- Informed: the person understands that posts are public and may be shared.
- Recorded: you can show who agreed, to what, and when.
- Easy to withdraw: as easy to take back as it was to give.
Inspectors look at dignity and respect for people’s privacy, and that includes how a home shares images of the people who live there. A clear consent routine is good evidence that you take it seriously.
When a resident can’t decide for themselves
Many residents can decide perfectly well, sometimes with a little support, and you should always start by assuming they can. Explain simply, show them the kind of photo you mean, and give them time.
If someone can’t make this decision, in England and Wales the Mental Capacity Act applies:
- Record that you assessed their capacity for this decision.
- Check whether anyone holds a Lasting Power of Attorney for health and welfare, or is a court-appointed deputy, who can be involved.
- Make a best-interests decision and record it, taking into account the person’s past wishes and values and talking to family and those close to them.
- Ask whether sharing a photo publicly is really in their best interests. Often the honest answer is no, and a photo where they can’t be recognised works just as well.
Scotland and Northern Ireland have their own capacity laws. The principle is the same: decide carefully, record it, and lean towards privacy.
Staff, visitors and children
- Staff: ask, record and respect the answer. Never make appearing online a condition of the job.
- Visitors and families: ask before including them, especially in a photo you plan to share.
- Children (school visits, grandchildren): get consent from a parent or the school, and avoid naming them.
What never to post
- Personal care, bathing, medication or anything to do with health treatment.
- Anyone who looks unwell, distressed, confused or not dressed as they’d want to be seen.
- Full names with photos, room numbers, dates of birth or health details.
- Care plans, rotas, whiteboards or paperwork in the background.
- Anyone who said no, or whose consent you can’t check.
Keeping consent up to date
- Collect consent when someone moves in, and review it at least once a year, or at each care plan review.
- Review it straight away if their capacity or circumstances change.
- Keep a simple list the person posting can check: name, yes or no, and where.
- When someone withdraws consent, take down posts you control and let everyone who posts know.
- When a resident dies, ask the family before sharing anything, and remove posts if they ask.
Free photo consent form
We’ve made a simple consent form you can print, fill in and keep on file. It covers where photos may be used, whether names can be included, and how to change your mind.
Open the printable consent form
Adapt it to your own home and policies. It isn’t a substitute for your own data protection and capacity procedures.
Make the check part of posting
The weak point in most homes isn’t the form, it’s the moment a photo goes online without anyone checking it. Build the check into how you post: staff draft, a manager approves. In Ribbon, staff send posts for approval and nothing goes out until a manager says yes. Read more in our guide to social media for care homes.