Taking Photos of People in Public: Legal Issues for Australian Businesses

If you run a small business, taking photos in public can feel like a normal part of doing business.

You might be capturing content for social media, filming behind-the-scenes footage at an event, photographing your team at a work function, or taking customer photos for testimonials. You might even be using street photography-style shots for branding.

But the question we hear a lot is: is it legal to take a photo of someone in public in Australia?

The short version is that taking a photo in a public place is commonly permitted - but that doesn’t automatically mean your business can use the photo however it wants. In practice, businesses usually face risk around consent, privacy, surveillance laws (which vary by state and territory), and how the image is used (especially online).

Below, we’ll walk you through the practical rules and the common “watch-outs” so you can confidently create content while protecting your business.

Is It Legal To Take A Photo Of Someone In Public In Australia?

In many everyday situations, yes - it may be legal to take a photo of someone in public.

Australia doesn’t have one single “photography law” that bans taking photos of people in public. Instead, the legal risk tends to come from a mix of areas, like:

• privacy and surveillance laws (which can vary significantly by state/territory, and can apply even when you’re not “hiding” what you’re doing)
• consent and image releases (particularly for commercial/promotional use)
• workplace surveillance rules (if staff are involved)
• Australian Consumer Law risks (for example, misleading or deceptive conduct if an image implies endorsement)
• defamation and reputational harm
• harassment and related conduct
• where the photo was taken (public place vs private property)

So while “taking the photo” might be allowed, your business can still get into trouble depending on what you do next - and on the context in which the photo was taken.

Taking A Photo vs Using A Photo: The Difference That Matters For Businesses

For small businesses, this is the key distinction:

• Taking a photo is the act of capturing an image.
• Using a photo includes publishing it on your website, social channels, ads, brochures, EDMs, signage, or selling it as part of a product.

Even if it’s legal to take the photo in the moment, your commercial use of that photo can raise separate legal issues.

When Can Taking Photos Become Legally Risky?

In a business context, taking photos of people in public becomes risky when it starts crossing into “surveillance”, “intrusion”, or unfair/unsafe conduct - or when your business is capturing and sharing images in a way people wouldn’t reasonably expect (even in a place that’s technically public).

Here are some common scenarios where you should slow down and check your approach.

1. If You’re Recording In A Way That Looks Like Surveillance

A quick snap at a bustling market is very different from installing devices or repeatedly recording people for monitoring purposes.

If your setup starts to resemble ongoing monitoring (especially with fixed cameras, CCTV, or body-worn cameras), you may trigger additional obligations. This is particularly relevant for hospitality venues, retail stores, gyms, and coworking spaces.

If that sounds like your business, it’s worth getting your head around CCTV laws and how they interact with notice, consent, and workplace expectations.

2. If The Photo Captures Sensitive Context (Even In Public)

Some images can be sensitive even if they’re taken in a public place - and in some situations, people can still have a reasonable expectation of privacy about what they’re doing (or what the image reveals) even if they’re not inside their home.

For example:

• outside medical clinics or health services
• capturing children at a school event or near school grounds (including where a school’s policies restrict photography)
• images implying someone is involved in wrongdoing
• photos revealing religious or political affiliation (depending on context)

These aren’t automatically illegal, but they can create a bigger risk profile for complaints, reputational damage, and potential legal claims (especially if you publish or commercialise them).

3. If You’re On Private Property (Even If It “Feels Public”)

A lot of places that feel public aren’t actually public in a legal sense. Think:

• shopping centres
• stadiums
• restaurants and bars
• private event venues
• ticketed events

In these locations, the venue can set conditions of entry (including restrictions on photography and filming). If you ignore those conditions, your business can be asked to leave, or potentially face claims connected to trespass or breach of venue rules.

4. If It Could Be Harassment Or Intimidation

Even if you’re in a public place, taking photos can become legally risky if it’s paired with behaviour that could be seen as harassment, stalking, or intimidation.

This is especially important if your staff are doing street marketing, filming “prank” style content, or approaching members of the public for content creation.

From a business standpoint, it’s also a workplace safety issue - you want clear rules so your staff aren’t placed in situations that escalate.

Do You Need Consent To Photograph People For Your Business?

Consent is where small businesses can most easily reduce risk.

There isn’t a one-size-fits-all rule that says you always need consent to take a photo in public. But if your business is using images to promote itself, consent becomes a practical (and often necessary) step - and it can also help manage Australian Consumer Law risk where a photo could imply endorsement or affiliation.

When Consent Is Strongly Recommended (Even If You Think It’s “Public”)

You should seriously consider getting consent if you’re:

• photographing a person as the clear subject of the image (not just part of a crowd)
• using the image in advertising, sponsored content, or paid campaigns
• posting customer images as testimonials or “before and after” shots
• photographing minors (and, in practice, getting permission from a parent/guardian)
• capturing content at a private venue or ticketed event

Consent is also an expectation issue: even when something may be technically allowed, people can still complain. If your content goes viral or is shared out of context, it can create brand risk very quickly.

What “Good Consent” Looks Like In Practice

For businesses, it helps to think about consent in layers:

• Verbal consent: can be okay for low-risk, casual content, but harder to prove later.
• Written consent: best for marketing, ads, and anything “evergreen” you want to reuse.
• Signage + entry conditions: useful for events and venues (for example, “Photography and filming may occur at this event…”).

If you’re using images for marketing, it’s common to formalise this with a release. Depending on the context, that might look like a media release form or a more specific agreement with tailored permissions.

Privacy, Surveillance, And Workplace Rules (What Businesses Often Miss)

Most businesses don’t set out to “invade privacy”. The issues usually come up because the business is focused on content and marketing - and misses the behind-the-scenes compliance pieces.

Privacy: Are You Collecting Personal Information?

A photo of a person can be “personal information” if the individual is identifiable. If your business is collecting, storing, and using those images (especially as part of a customer database or marketing library), you should treat it as a privacy compliance issue.

That’s where having a clear Privacy Policy and clear internal practices can make a big difference.

In many cases, you’ll also want a clear explanation of what you’re collecting and why, which is where a privacy collection notice can come in (particularly if you’re collecting images in a structured way, like member profiles, onboarding forms, or “submit your photo” campaigns).

Surveillance Laws (Including “Optical Surveillance”)

Australian states and territories have different rules around surveillance devices. The core idea is that the law may regulate how you visually record people in certain circumstances, particularly where there is an expectation of privacy - and “public place” doesn’t always automatically mean “no privacy expectations”, depending on what is being captured and how.

This is a common trap for businesses recording content that includes audio as well as video. If your content includes sound, the risk can increase significantly compared to silent photography, because listening/recording laws can be stricter and vary materially by state and territory.

While this article focuses on photos, many businesses do “photo + video” together. If that’s you, it’s worth checking how filming without consent can raise additional issues, depending on the circumstances.

Workplace Photography And Staff Content

If you’re photographing staff for your website, social media, recruitment ads, or brand campaigns, you should treat it as part of your workplace compliance and HR process.

Even if your workplace isn’t “public”, staff can still have concerns about how images are used, how long they stay online, and whether they can withdraw consent later.

If you use cameras in the workplace (including for security or operational reasons), your obligations can be different again - and it’s worth understanding whether cameras are legal in the workplace in your state and what notice requirements may apply.

How Can Your Business Use Public Photos Safely For Marketing?

For many small businesses, the goal isn’t just to “avoid getting sued” - it’s to build a brand that people trust. Taking a practical, respectful approach to photography is both a legal and commercial win.

Here are some steps you can build into your content process.

1. Decide Whether The Photo Is Editorial Or Promotional

A helpful way to assess risk is to ask: “Are we using this photo to document a moment, or to sell something?”

• Lower risk: general atmosphere shots, crowds, wide angles where no one is singled out.
• Higher risk: close-ups, “feature” shots of a person, anything that implies endorsement (“Look who loves our product!”).

If the photo suggests a person supports your business (or is affiliated with it), that’s where you should move toward clear, written consent - and check that the overall post or ad isn’t misleading under Australian Consumer Law.

2. Use Clear Signage At Events And Activations

If you run events, pop-ups, activations, or community days, signage can do a lot of heavy lifting.

Signage won’t fix every scenario (especially if you’re featuring a person), but it can:

• set expectations upfront
• reduce complaints
• support your “informed consent” process

For higher-value content (like brand campaigns), we still recommend getting direct permission from anyone you feature.

3. Have A Simple “Content Permission” Workflow

In small businesses, content gets captured quickly and posted quickly - which is exactly how mistakes happen.

A simple workflow can be as basic as:

1. Before shooting: your staff ask permission if someone will be identifiable and featured.
2. During shooting: note the person’s name and contact details (if appropriate) and what they agreed to.
3. Before posting: do a quick risk-check (is it respectful, accurate, and non-misleading?).
4. After posting: have a process to respond to removal requests quickly.

If you regularly film on location (like gyms, studios, or client premises), a tailored permission document such as a location release form can also help clarify what you’re allowed to capture and publish.

4. Be Careful With Children And Vulnerable People

If your business interacts with children (for example, education providers, sports clubs, family events, childcare-related businesses, or brands marketing to families), treat photos as a high-risk area.

As a general rule, get clear permission from a parent/guardian before using any photo where a child is identifiable, especially for promotional purposes. Also be mindful that schools and childcare services often have strict rules about photographing children on-site - even if the event feels “public”.

5. Don’t Forget About Customer Complaints And Take-Down Requests

Even with consent, people can change their mind, or your business might decide that keeping the post isn’t worth the argument.

Having an internal “take-down” process can reduce risk and protect your reputation. It also helps staff respond consistently and quickly.

Where businesses struggle is when the ownership of images is unclear (for example, a contractor photographer holds the original files). This is where clear contracts matter.

What Legal Documents And Policies Help Protect Your Business?

You don’t need to overcomplicate your setup, but having the right documents can save a lot of stress later - particularly if your business is building a brand online and publishing content regularly.

Depending on your business model, these are commonly useful:

• Privacy Policy: sets out how your business collects, uses, and stores personal information (including identifiable images). This is especially important if you’re collecting content through your website, email campaigns, or forms.
• Privacy Collection Notice: a short notice at the point you collect information (including photos), explaining what you’re collecting and why.
• Media Release / Talent Release: written permission from someone you photograph or film, allowing you to use their image for marketing and branding purposes.
• Workplace Policies: if staff are being photographed or are capturing content, clear internal rules reduce disputes and confusion.
• Website Terms: if you host user-generated content or run campaigns where people submit images, your terms should cover rights to use that content.

It can also help to understand the difference between privacy and confidentiality, because businesses often treat them as the same thing (and they aren’t). Privacy is about how you handle personal information, while confidentiality is about keeping certain information secret under contract or a duty.

A Quick Reality Check: Social Media Makes Everything “Bigger”

One of the biggest risk multipliers for businesses is how quickly an image can spread once it’s posted.

A photo that seems harmless in context can become a problem if it:

• embarrasses someone
• implies something untrue (including that they endorse your business)
• shows a person in a sensitive moment
• draws negative attention toward an identifiable individual

So even when you’re comfortable that taking the photo was lawful, it’s worth pausing to ask: Is this respectful, necessary, and aligned with our brand values?

Key Takeaways

• In many situations, it may be legal to take a photo of someone in public in Australia, but the rules are not always simple and risk often depends on the context, location, and the state/territory.
• For businesses, the bigger legal risk is usually not the act of taking the photo - it’s how you use the image (especially for marketing, advertising, and online content), including whether it could be misleading under Australian Consumer Law.
• Consent is one of the best ways to reduce risk, particularly when someone is the clear subject of the photo, when children are involved, or when you’re using images commercially.
• Privacy and surveillance laws (which can vary by state/territory) may apply depending on whether your photography is closer to “monitoring”, whether audio is recorded, and whether people have an expectation of privacy in the circumstances.
• Businesses should consider having practical protections in place, including a Privacy Policy, clear collection notices, and written releases where appropriate.
• Having a simple internal workflow for asking permission, storing consent, and responding to take-down requests can protect both your legal position and your brand reputation.

If you’d like help setting up the right permissions, privacy documents, or contracts for your content and marketing, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.