On this page
Key Stats
Key Takeaways
- Record consent at the moment an image is captured, not after it is shared.
- Separate program photography from family photography because the owners differ.
- Ask every identifiable adult in a group photo before publishing it.
- Treat missing consent as a gap to resolve, not as implied permission.
Question and scope
This review asks a narrow operational question: when a family takes or shares photos during a campus visit, what written evidence shows that the people in the images agreed? The unit is one image or short video clip tied to one visit and one program. The review does not attempt to interpret privacy law for a specific family or school. It looks only at whether a family can reconstruct who consented to what, and it extends the official visit itinerary handoff review with a narrower media lens.
The scope is fixed before any image is reviewed so the result cannot be steered by a memorable picture. Eligible items must show at least one identifiable person, be captured during a visit, and have a recorded sharing decision. An image with no identifiable person is excluded because consent has no subject. An image that was never shared is excluded because the publication question did not arise.
The family record is the object of study because the family often controls the images that leave the visit. A program may have its own media process, and the family may never see it. The review therefore treats the family's dated note as the primary evidence and the program's media policy as a check. That order prevents a polished program page from standing in for a family's own consent record.
Population and unit
The population is the set of images and short clips a family or support assistant collected during one visit cycle. Each item must name a program, a visit date, and at least one identifiable adult. Items that show only buildings or fields are excluded because they carry no personal privacy question. The same athlete may contribute many items if the items belong to different visits or different sharing decisions.
The unit stays the image, not the visit, because consent can differ from one image to the next. An image that is removed from the share folder after a review remains in the set under its original key. That rule prevents a cleaned folder from disappearing and making the record look more complete than it was. Every removal from the set carries a written reason and the date of the decision.
Definitions and measures
Consent exists when an identifiable person has been asked whether the image may be shared and the answer is recorded with a date. A person who was simply present in a public area has not necessarily consented to publication. A person who agreed to a private family photo has not necessarily agreed to a public post. The definition focuses on the specific use because that is what the family can control.
The primary measure is the number of images that reached a share decision without a recorded consent. A second measure records whether the image included someone outside the family. Both measures are reported with the eligible count and the number of images that could not be classified. A percentage without those counts would hide the shape of the sample.
Evidence standard
Each image is tagged cleared, private, or unresolved using the note that was open at the time of review. A cleared image has consent for the specific use and a date. A private image has no publication decision and stays inside the family. An unresolved image has a possible consent but no usable record. The tag describes the file, not the family's confidence.
When two people disagree about whether consent was given, the image stays private until the person in the frame confirms in writing. A verbal recollection after the review is recorded separately and cannot retroactively change the tag. The reviewer records the image, the retrieval date, and the specific line that supports the tag. Silence is never treated as consent.
A consent record must identify the use as well as the person. "Okay to share" is weaker than "okay to post on the family account without a location tag." The reviewer notes whether the note names the platform, the audience, and any restriction. This is the same discipline used in the athletic profile photo consent control, applied to visit images. A record that names the use is easier to honor than a vague yes.
Collection
The sample is drawn from images that entered an active visit folder during the declared window. Collection uses a fixed interval and a written stopping point so the reviewer cannot keep adding images until a pattern appears. Images are included whether or not the family liked them, because a flattering picture can still create a privacy problem. The note states how many images were eligible, how many were reviewed, and where review stopped.
Late additions are refused after the results become visible. An image added at that point would be selected with knowledge of the outcome and would weaken the comparison. If an image is discovered after the stop, it is logged as out of scope and kept for the next window. The reviewer also records any visit with no media note at all, because that absence is itself an operational finding.
Every program with no usable media note is listed in the collection note even when no image was tested. That list shows whether the sample is limited by the family's practice or by the program's policy. A reviewer who cannot find a note should not silently drop the visit from the frame. Listing the gap keeps the denominator visible and gives the next cycle a concrete place to start.
Consent test
The consent test asks three questions of each image. First, can the family name every identifiable person in the frame? Second, is there a dated record of what each person allowed? Third, does the intended use match the permission that was given? An image that fails the first test cannot be cleared, and an image that fails the third is a misuse even when consent exists.
The test is applied before sharing, not after a complaint. Applying it afterward invites the reviewer to defend a post that is already public. The order matters because a deleted post may still be cached or screenshotted. The reviewer records the answers and the date so a second reader can see the sequence.
An image that fails the test is moved to the private folder rather than deleted immediately. The family then has one review cycle to ask the missing person before losing the memory. The private folder is reported with the main result instead of being hidden in an appendix. That delay is a control, not indecision.
Privacy and access
Study identifiers replace names in the working set, and the crosswalk stays inside the approved family system. Only the fields needed to test consent are opened, and temporary access is removed when the review ends. Images of minors are described rather than copied into the report. The report lists what was withheld or unavailable instead of quietly leaving it out.
Privacy obligations shape the handling of the images, but they do not make the consent record reliable on their own. An image can be stored securely and still be shared without permission. The review separates the access question from the consent question so one does not substitute for the other. That separation is especially important when a family shares a folder with an assistant.
Limits and next step
The conclusion is tied to the visit cycle, the mix of programs, and the sharing practices the family already used. A shorter window or a set of images concentrated in one program may produce a different result. Re-running the review after the next visit season shows whether the pattern holds. Where the second run differs, the report shows both outcomes and names the operational decision that depends on the choice.
The output supports one process fix and a scheduled retest, not a legal opinion about any specific image. A reasonable next step is to record consent at the moment of capture, before the family leaves the campus. A second step is to keep unresolved images private until the missing person confirms. Neither step requires a new platform, and both can be checked without collecting more personal data.
A conclusion would change if the review window overlapped a major visit weekend or if most images came from one program. A larger sample with more families would test whether the pattern is local or general. A second reviewer with less recruiting experience would test whether the definitions depend on insider knowledge. The report names those conditions instead of treating the current result as final.