Privacy and permission are not one yes or no. Someone decides whether photographs are taken, someone decides who receives them, someone decides what is published, and someone decides how long they are kept. Each decision has its own owner, whether that is the law, a contract, the venue or your own policy. Write the decisions down before the event.
Most hosts ask one question: "Are we allowed to take and use these photographs?" The honest answer is that it is several questions. Each one has a different owner, and a yes to one does not settle the rest.
This guide maps those decisions. The linked guides go deeper on each. None of it is legal advice, and Malaysian law and regulator guidance can change, so use a qualified adviser for legal wording.
What are the separate decisions?
Think of five points in the life of a photograph.
- Capture. Is it acceptable to photograph people here, at this event?
- Handling. Who holds the files, where are they stored and who can see them?
- Delivery. Who receives the photographs, and in what form?
- Publication. What may be shown to the public, and where?
- Later use. Can the images be used again, for example in an advertisement or a portfolio?
An answer at one point does not carry to the next. Our guide to permission to photograph and permission to publish explains the most common gap.
Who owns each decision?
Four sources of rules sit side by side.
| Source | What it covers | Who sets it |
|---|---|---|
| Law | Personal data, copyright, other legal duties | Parliament and regulators |
| Contract | What the client and photographer agreed | The two parties |
| Venue rules | Cameras, positions, flash, access | The venue or its manager |
| Policy | How a host chooses to treat guests | The host or organiser |
Policy can be stricter than the law. It cannot remove a legal duty. Our guide to venue permission, participant permission and photographer terms shows how the layers fit together.
What do Malaysian rules say about personal data?
Photographs of identifiable people can be personal data. Malaysia's Personal Data Protection Act 2010 applies to personal data processed in commercial transactions, and it was amended in 2024, with changes coming into force in stages during 2025. The Personal Data Protection Department publishes the current text and guidance.
We do not interpret the Act for you. What it means for your event depends on the facts, so ask a qualified adviser. The practical lesson is simple: collect and keep only what you need, tell people what you will do, and secure the files.
Copyright is a different question
The person who owns the copyright in a photograph is not always the person who paid for it. The agreement usually decides, so read it. Our guide to copyright ownership and permission to use event photographs explains how to check.
How do uses differ?
A photograph sent to the family is not the same as a photograph in a newspaper or an advertisement. State the audience and purpose clearly. Our guide to personal, internal, press and advertising uses of photographs sets out the differences.
What if the organiser and a guest disagree?
It happens. A host may want a group photograph, while one guest prefers not to appear. Our guide to organiser instructions and individual guest preferences explains how to weigh the two. A short, respectful opt-out nearly always works better than a confrontation on the day.
Special cases need extra care
Some settings call for more thought:
- Children. See children's event photographs.
- Private galleries and forwarded links. See private gallery access and onward sharing.
- Portfolio use by the photographer. See agreeing whether photographs may appear in a portfolio.
- Embargoes. See embargoes and photographs restricted from publication.
- Sponsors and other suppliers. See sharing event images with sponsors, venues and other suppliers.
- Edits after delivery. See cropping, retouching and modifying photographs.
- Paid advertising. See using recognizable event photographs in paid advertising.
- Online storage. See cloud galleries and cross-border photo-data handling.
- Automated search. See facial recognition and automated guest-photo search.
A simple framework
Before the event, answer six questions in writing.
- What are the photographs for?
- Who is photographed, and how are they told?
- Who receives the files?
- What may be published, and who approves it?
- How long are files kept, and where?
- How can someone ask for a photograph to be removed?
Our photo sharing and privacy plan and image-use and approval register help you record the answers. Our own approach to publication choices is described on our page about photography privacy and publication choices.
What we do on our side
We read your brief, ask what is missing and confirm coverage, crew, deliverables and permitted uses in your written quotation. We do not state terms that have not been agreed, and we tell you plainly if something you want needs a decision first.
A short scenario
For example, imagine a 200-guest company dinner. The host wants a record for staff and a few images for a recruitment page. Staff-only sharing is an internal use. The recruitment page is public, so the host asks the people in those images first.
The host also asks the venue about camera rules, tells guests through the invitation and names one person to handle opt-outs. Nothing here needs special equipment. It needs a few written answers before the day, and a person who owns them.
Questions people often skip
Who will look after the files after delivery? Where are they stored? If you keep a private gallery open for a year, who still has the link? Who decides when old files are deleted? These are easy to forget on the day and harder to fix later.
Where to start
Start with the purpose. Once you know what the photographs are for, the rest of the answers become easier to see. Share that purpose with us when you enquire, and we will build the plan from there.
Checklist
- Name the person who decides each photo question for your event.
- Write down what the photographs are for.
- Decide how guests are told, and how they can opt out.
- List who will receive the delivered photographs.
- Agree what may be published, where and for how long.
- Check venue rules on photography and recording.
Tell us who is hosting, who will be photographed and how you expect to use the pictures. We will set out in writing what the booking covers and which decisions still need your answer.
Settle our photo permissions earlyExplore: Privacy, permission and publication
29 pages- Copyright ownership and permission to use event photographs
- Personal, internal, press and advertising uses of photographs
- Permission to photograph and permission to publish
- Organizer instructions and individual guest preferences
- Venue permission, participant permission and photographer terms
- Children's event photographs: questions authorized adults must resolve
- Private gallery access and onward sharing
- Agreeing whether photographs may appear in a portfolio
- Embargoes and photographs restricted from publication
- Sharing event images with sponsors, venues and other suppliers
- Cropping, retouching and modifying photographs after delivery
- Using recognizable event photographs in paid advertising
- Cloud galleries and cross-border photo-data handling
- Facial recognition and automated guest-photo search
- AI editing and image-processing services in the workflow
- Image-handling responsibilities across agencies and partner photographers
- Removal, withdrawal and deletion requests: what to clarify in advance
- Photographing attendees whose names should not accompany their images
- Who can authorise photography instructions for a group booking?
- Event signage and individual photography preferences
- Sharing a private event gallery through messaging groups
- Photographs that reveal addresses, badges or personal documents
- Event photographs that show confidential business information
- When a client asks to remove a person from an event photograph
- Using event photographs in AI training or external datasets
- Keeping records of agreed image-use restrictions
- Sharing images with a supplier who was not part of the booking
- Photography instructions when a parent or guardian disagrees with another adult
- Privacy questions before using an automated photo-distribution service
Common questions
Is a guest's presence at the event the same as consent?
Not automatically. Presence may be relevant, but it does not answer every question. What was said in the invitation, what signs were shown and how the images will be used all matter. Ask a qualified adviser about the legal position for your event.
Who is responsible for telling guests about photography?
Usually the host or organiser, because they know the guests and control the invitation. Agree the wording with us before the day. Our guest photography communication builder helps you draft a short notice.
Does paying for photography mean we may use the pictures anywhere?
Not necessarily. What you may do with the images depends on your agreement with the photographer and on the people shown. Check the permitted uses in your quotation or booking terms before publishing.
Do these guides give legal advice?
No. They explain the questions to ask. Malaysian rules on personal data and copyright change, so take advice from a qualified person for legal wording or a specific dispute.
What if a guest asks us to remove a photograph later?
Decide the process before the event: who receives requests, how fast they are handled and what happens to copies already shared. Our guide on removal requests lists what to clarify.
Sources checked
Settle our photo permissions early
Tell us who is hosting, who will be photographed and how you expect to use the pictures. We will set out in writing what the booking covers and which decisions still need your answer.
What happens next: You send your event details on WhatsApp. Our team reads the brief, asks what is missing, then confirms in writing whether the date, venue and coverage can be booked, with a quotation. Opening WhatsApp does not send anything, and a message is not a booking until both sides confirm.
Last reviewed: