Privacy, permission and publication

Event photography privacy, permission and image use

You want photographs of your event, and you want everyone in them treated fairly. Several different decisions sit behind that.

Short answer

Privacy and permission are not one yes or no. Someone decides whether photographs are taken, someone decides who receives them, someone decides what is published, and someone decides how long they are kept. Each decision has its own owner, whether that is the law, a contract, the venue or your own policy. Write the decisions down before the event.

Most hosts ask one question: "Are we allowed to take and use these photographs?" The honest answer is that it is several questions. Each one has a different owner, and a yes to one does not settle the rest.

This guide maps those decisions. The linked guides go deeper on each. None of it is legal advice, and Malaysian law and regulator guidance can change, so use a qualified adviser for legal wording.

What are the separate decisions?

Think of five points in the life of a photograph.

  1. Capture. Is it acceptable to photograph people here, at this event?
  2. Handling. Who holds the files, where are they stored and who can see them?
  3. Delivery. Who receives the photographs, and in what form?
  4. Publication. What may be shown to the public, and where?
  5. Later use. Can the images be used again, for example in an advertisement or a portfolio?

An answer at one point does not carry to the next. Our guide to permission to photograph and permission to publish explains the most common gap.

Who owns each decision?

Four sources of rules sit side by side.

SourceWhat it coversWho sets it
LawPersonal data, copyright, other legal dutiesParliament and regulators
ContractWhat the client and photographer agreedThe two parties
Venue rulesCameras, positions, flash, accessThe venue or its manager
PolicyHow a host chooses to treat guestsThe host or organiser

Policy can be stricter than the law. It cannot remove a legal duty. Our guide to venue permission, participant permission and photographer terms shows how the layers fit together.

What do Malaysian rules say about personal data?

Photographs of identifiable people can be personal data. Malaysia's Personal Data Protection Act 2010 applies to personal data processed in commercial transactions, and it was amended in 2024, with changes coming into force in stages during 2025. The Personal Data Protection Department publishes the current text and guidance.

We do not interpret the Act for you. What it means for your event depends on the facts, so ask a qualified adviser. The practical lesson is simple: collect and keep only what you need, tell people what you will do, and secure the files.

The person who owns the copyright in a photograph is not always the person who paid for it. The agreement usually decides, so read it. Our guide to copyright ownership and permission to use event photographs explains how to check.

How do uses differ?

A photograph sent to the family is not the same as a photograph in a newspaper or an advertisement. State the audience and purpose clearly. Our guide to personal, internal, press and advertising uses of photographs sets out the differences.

What if the organiser and a guest disagree?

It happens. A host may want a group photograph, while one guest prefers not to appear. Our guide to organiser instructions and individual guest preferences explains how to weigh the two. A short, respectful opt-out nearly always works better than a confrontation on the day.

Special cases need extra care

Some settings call for more thought:

A simple framework

Before the event, answer six questions in writing.

  1. What are the photographs for?
  2. Who is photographed, and how are they told?
  3. Who receives the files?
  4. What may be published, and who approves it?
  5. How long are files kept, and where?
  6. How can someone ask for a photograph to be removed?

Our photo sharing and privacy plan and image-use and approval register help you record the answers. Our own approach to publication choices is described on our page about photography privacy and publication choices.

What we do on our side

We read your brief, ask what is missing and confirm coverage, crew, deliverables and permitted uses in your written quotation. We do not state terms that have not been agreed, and we tell you plainly if something you want needs a decision first.

A short scenario

For example, imagine a 200-guest company dinner. The host wants a record for staff and a few images for a recruitment page. Staff-only sharing is an internal use. The recruitment page is public, so the host asks the people in those images first.

The host also asks the venue about camera rules, tells guests through the invitation and names one person to handle opt-outs. Nothing here needs special equipment. It needs a few written answers before the day, and a person who owns them.

Questions people often skip

Who will look after the files after delivery? Where are they stored? If you keep a private gallery open for a year, who still has the link? Who decides when old files are deleted? These are easy to forget on the day and harder to fix later.

Where to start

Start with the purpose. Once you know what the photographs are for, the rest of the answers become easier to see. Share that purpose with us when you enquire, and we will build the plan from there.

Checklist

  • Name the person who decides each photo question for your event.
  • Write down what the photographs are for.
  • Decide how guests are told, and how they can opt out.
  • List who will receive the delivered photographs.
  • Agree what may be published, where and for how long.
  • Check venue rules on photography and recording.

Tell us who is hosting, who will be photographed and how you expect to use the pictures. We will set out in writing what the booking covers and which decisions still need your answer.

Settle our photo permissions early

Explore: Privacy, permission and publication

29 pages

Common questions

Is a guest's presence at the event the same as consent?

Not automatically. Presence may be relevant, but it does not answer every question. What was said in the invitation, what signs were shown and how the images will be used all matter. Ask a qualified adviser about the legal position for your event.

Who is responsible for telling guests about photography?

Usually the host or organiser, because they know the guests and control the invitation. Agree the wording with us before the day. Our guest photography communication builder helps you draft a short notice.

Does paying for photography mean we may use the pictures anywhere?

Not necessarily. What you may do with the images depends on your agreement with the photographer and on the people shown. Check the permitted uses in your quotation or booking terms before publishing.

Do these guides give legal advice?

No. They explain the questions to ask. Malaysian rules on personal data and copyright change, so take advice from a qualified person for legal wording or a specific dispute.

What if a guest asks us to remove a photograph later?

Decide the process before the event: who receives requests, how fast they are handled and what happens to copies already shared. Our guide on removal requests lists what to clarify.

Sources checked

  1. Personal Data Protection Department Malaysia (2026-10)
  2. Copyright Act 1987 (Act 332), WIPO Lex (2026-10)

Settle our photo permissions early

Tell us who is hosting, who will be photographed and how you expect to use the pictures. We will set out in writing what the booking covers and which decisions still need your answer.

What happens next: You send your event details on WhatsApp. Our team reads the brief, asks what is missing, then confirms in writing whether the date, venue and coverage can be booked, with a quotation. Opening WhatsApp does not send anything, and a message is not a booking until both sides confirm.

Last reviewed:

WhatsApp us