Tuesday afternoon: I almost published a client’s photo
At 4 p.m. on Tuesday, I was editing a social post for a client who wanted a custom avatar. I was about to publish her photo and a chat screenshot. Halfway through, I stopped: whose photo was it? Had she actually agreed to it being public, and on which platforms? I learned later that one line in a chat saying “you can post it” does not mean the risk disappears.
This time, Meta was fined about €805 million by Italy’s data protection authority, with the dispute centered on photo privacy and how the platform handled it. One of the people involved in the story was Chen Yue, a freelance photographer who retouches photos for 20 clients from her Hangzhou studio. She told me the easiest details to overlook are not the original portraits, but shots of clients sunbathing, from behind, or inside their homes with the address visible. If a photo does not show an ID card, that does not automatically mean it contains no private information.
This is not just a big-company problem
After Italy’s data protection authority fined Meta, the company said it would carefully assess the decision and continue protecting users’ rights. For us, the point is not simply remembering the news about a giant corporation. It is noticing similar moves in our own businesses: using a client’s avatar in our portfolio, putting team photos on our website, sharing chat screenshots as proof of results, or posting client case studies on social media.
I have gotten stuck here too. I used to assume that because a client was someone I knew, I could keep using their image indefinitely. Later, a friend building a personal brand in Shenzhen reminded me to keep written records of the purpose, platform, duration, and withdrawal process. Put simply, this is not just an authorization form. It is making sure the client knows what we will do with the photo.
Today’s replication: zero cost, 20 minutes, low barrier
Money: 0 yuan. Time: about 20 minutes. Technical barrier: no coding knowledge needed; being able to copy a text template is enough. First step: open the chat where you usually confirm requirements with clients and look for a line about whether photos, screenshots, or case studies can be published. If there is none, add the question at the next delivery. Do not rush to delete old content; start by sorting everything by risk level.
I would prepare a simple confirmation sheet covering the scope of the photos, publishing platforms, display period, whether the images can be used in advertising, and how the client can request that we stop. A written confirmation can come first; there is no need to buy a course or install complicated software right away. If we are not organized now, that is okay, but before posting the next photo, let us pause for five minutes.
Match the process to our stage
If I had just started, I would first create the simplest checklist and send one confirmation message before using any client photo. With one or two clients, I would save the authorization in each client file and check the intended use before publishing. While scaling, I would give the team one standard template, keep confirmation records, and regularly remove materials that are no longer appropriate to publish. Meta’s fine is not an exam for individual entrepreneurs, but it is a very cheap risk warning. The lesson is caution, not panic.