Get written permission before posting an identifiable photo of a student. National PTA's own policy says PTAs should not post images of children, families, or volunteers without express permission, and it publishes a consent and photo-release form for the purpose. In practice that means a signed release on file, an opt-out list somebody actually checks before publishing, consent refreshed each school year, and not pairing a child's face with their full name.
Get written permission before you post an identifiable photo of a student. National PTA’s own policy is that PTAs should not post photographs of volunteers, families, or children without express permission, and it publishes a consent and photo-release form for exactly this. In practice that means four things: a signed release on file, an opt-out list somebody checks before publishing, consent refreshed each school year, and not putting a child’s face next to their full name.
This comes up constantly and gets answered badly — usually either “the school has a release, we’re fine” or a vague worry that stops a PTA posting anything. Neither is right.
This is practical guidance, not legal advice. Your state PTA and your district both have policies, and those govern.
What National PTA actually says
The relevant guidance is unambiguous: secure written consent before using images of children, families, or volunteers, obtained at events or at the beginning of the school year. National PTA provides a “Consent to Photograph / Permission to Use Photograph” form you can adapt rather than drafting your own.
State PTAs layer on top. California State PTA’s publication guidelines say not to publish photos or personal information about students or adults without written permission, and make the PTA president responsible for compliance. Check your own state’s toolkit — the requirements are not identical everywhere.
One useful clarification from the Palo Alto Council of PTAs: a website owned and administered by the PTA does not need the principal’s approval for posts, though coordinating anyway is good practice. Your site is yours. That is a freedom and a responsibility at the same time.
”The school already has a release” — be careful
This is the assumption that gets PTAs into trouble.
The school’s photo release covers the school’s uses. A PTA is a legally separate nonprofit with its own governance, finances, and insurance — which is exactly why many districts won’t host PTA content in the first place. A release naming the school does not automatically name you.
Two things to do:
- Ask the school whether its release language extends to affiliated parent groups. Sometimes it does. Get the answer in writing and keep it with your records.
- Get the opt-out list, whatever the answer. Schools maintain a list of families who declined directory information or photo use. That list is the single most important document in this entire process, and it is worth nothing if nobody checks it before hitting publish.
Where FERPA fits
FERPA governs education records maintained by or for a school, and the US Department of Education’s privacy guidance has treated school-held photographs as education records. Whether a school may share them turns on its directory-information policy and which families opted out.
A PTA’s own website is not a school record system, so FERPA is not usually the direct constraint on you. But the practical conclusion is the same: a child whose family opted out of directory information should not appear on your site either. The family made a decision; which organisation’s server the photo sits on is not a distinction they will find reassuring.
Some states add their own restrictions. When in doubt, get explicit written permission — it costs one form and removes the question.
The rules that actually prevent problems
Four habits, in order of how much risk they remove:
1. Never pair a face with a full name. If you post the photo, don’t name the child. If you name the child, don’t run the image. This is standard safeguarding practice and it removes most identification risk from a gallery or newsletter in one move. First name only, or a caption about the event rather than the people.
2. Check the opt-out list before every publish, not once a year. This is a process, not a policy. Whoever posts photos needs the list in front of them. If your website takes two days and a vendor email to update, this step quietly stops happening — which is a website problem masquerading as a compliance problem.
3. Refresh consent annually. Families change their minds. Custody and safety circumstances change. A release signed three years ago by a parent who has since left the school is not a consent you want to be relying on in a difficult conversation.
4. Take it down when asked, then sort out the paperwork. If a parent asks, the answer is yes, immediately. Arguing about what the release technically permits is how a small thing becomes a board meeting.
Practical setup for a PTA website
- Collect releases with your membership forms at the start of the year. One touchpoint, one form, highest completion rate you will get.
- Keep the signed releases somewhere the next board can find them. Not in an outgoing president’s personal Drive. This belongs in your digital handoff inventory alongside the domain and the payment accounts.
- Decide in advance how to photograph an event that includes opted-out kids. Wide shots from behind, focus on the activity rather than faces, or a designated no-photo zone. Deciding at the event is deciding badly.
- Post images at web resolution — around 800×600 at 72 dpi is plenty for a browser, and National PTA suggests watermarking. A full-resolution original serves no purpose on a website and is more useful to someone misusing it.
- Write alt text that describes the activity, not the child. “Students planting in the school garden” is better than a name, and it is also what accessibility requires — one habit satisfying two obligations.
The part that’s really a website problem
Almost every failure here is the same failure: the person who needs to fix something can’t, quickly.
A parent asks for a photo to come down and the only person who can edit the site is on vacation. The opt-out list gets skipped because posting the gallery already takes 40 minutes. Consent forms live in an account nobody can access.
Those are not compliance problems. They are consequences of a website that is hard to change and credentials that live in one person’s head. If any of them sound familiar, the underlying issue is who can actually run your site — and that is fixable.
Written by Full Stack Tech NYC. We build and host custom school and PTA websites for $900 a year flat — migration included, accessibility checked on every deploy, and you own the domain, content, and code outright. Title I and high-need public schools can apply for a free build. See pricing and process →
Common questions
Does a PTA need permission to post photos of students?
Yes. National PTA's guidance is that PTAs should not post photographs of volunteers, families, or children without express permission, and recommends securing a written consent or photo release at events or at the start of the school year. National PTA publishes a release form template for this.
Does the school's photo release cover the PTA?
Do not assume it does. The school's release covers the school's uses, and a PTA is a legally separate organisation. Ask the school whether its release language extends to affiliated parent groups; if it does not, collect your own.
Does FERPA apply to photos on a PTA website?
FERPA governs education records maintained by or for a school, and the US Department of Education has treated school-held photos as education records. A PTA's own site is not a school record system, but the safest working assumption is that a photo taken at a school event involves a child whose family may have opted out of directory information — so check the opt-out list regardless of who runs the website.
Can we post a student's name with their photo?
Common safeguarding practice is to avoid pairing the two: if a photo is used, do not name the child; if a child is named, do not run their image. That single rule removes most of the identification risk in a school newsletter or gallery.
How often should photo consent be renewed?
Annually, at the start of each school year. Families change their minds, custody and safety situations change, and a release signed three years ago by a parent who has since left is not a consent you want to rely on.
What if a parent asks us to take a photo down?
Take it down first and sort out the paperwork afterwards. Whatever the release says, a parent asking is the end of the conversation — and having a website you can edit in two minutes rather than emailing a vendor is part of why that matters.