Solving the Consent Conundrum

With so much of our lives lived online, we are all increasingly aware of the need for privacy.

And yet many of us still routinely exchange huge amounts of personal information in return for ‘free’ access to services like Facebook, Instagram and LinkedIn.

For years, it was new and exciting. Regulation was weak. We didn’t think too much about the consequences.

Happily, those wild-west days of unregulated data exchanges are over.

Privacy Laws Have Caught Up

Though we may not always realise it, we are living in an era of increasingly strict privacy laws designed to regulate how organisations, both public and private, can store, display and disseminate our personal data, including biometrics.

GDPR in Europe, PDPA laws in Asia and FERPA in the US.

The consequences of infringement are real and can be onerous.

Why Photo Consent Is Hard for Schools and Universities

For schools and universities handling the personal data of vulnerable individuals, mandated to safeguard the well-being and privacy of their students, understanding and adhering to these laws is essential.

And yet for all the good intentions of school administrators, teachers and safeguarding officers, the practical realities of remaining compliant with privacy laws can be extremely challenging. Perhaps no more so than when consent relates to photos.

Imagine a scenario where you have a couple of thousand students.

That means a couple of thousand parents granting consent. Some will say yes to everything. Some will be ok for their child’s likeness to be used internally but not externally or for marketing. And any parent may revoke or modify their consent at any time.

The result is a nebulous, ever shifting, matrix of forms, relationships, expiry dates, and modifications. And if someone gets it wrong, if a school or university uses a child’s likeness in a photo without consent, the consequences could be costly – financially and reputationally.

Universities face a similar problem on a larger scale. Students usually give consent themselves, and may feel differently in their final year than they did in their first. Photos come from faculties, societies, open days and graduations, and the matrix becomes a maze.

How Do Schools and Universities Manage Photo Consent Today?

So how are most schools and universities managing this complex shape-shifting conundrum?

Most are still juggling paper forms, cross-checking spreadsheets and hunting through old emails. Marketing teams desperately try to remember who gave consent and who didn’t, as they navigate what has become a compliance minefield.

LightRocket was created to solve this challenge.

Media and Consent Management, Simplified

Building on decades of experience managing and protecting visual archives for global organisations, LightRocket automates, integrates and simplifies media and consent management.

We like to call it ‘simplexification’: taking a complex problem and making it simple (for the user at least).

Consent linked to the person, not the picture

In the case of media and consent management, we do this by linking consent to individual students, not pictures. So, a school using LightRocket always knows the consent status of every child in every photo.

Checking consent before every use

We go one step further by aligning usage with available consent. If you want to post a group picture on social media, for example, LightRocket will check if you have valid consents for everyone shown.

And if consents don’t align?

We solve that problem with an option to automatically blur the faces of any person for whom consent is not available or doesn’t correspond to the intended usage. Or you can simply deselect the picture and not download it.

It sounds, and is, beautifully simple; as any good software should be.

An End-to-End System for Schools and Universities

But as simple as LightRocket is for the user, it is also comprehensive. We’ve created an end-to-end solution that synchronises professional digital asset and consent management with your school database and parental (or even student) consent.

Connected to your student information system

As part of the onboarding process, our team integrates LightRocket's fully API-based system with the school or university’s student information system (SIS). Staff, parents, and students log in using single sign-on (SSO).

Our system uses permitted AI facial recognition (with no AI training) to identify students, who are linked to their parents or guardians and to any consent forms they or their parents signed.

Digital consent forms, sent straight to parents

Because LightRocket is fully integrated, schools can use the platform to create, manage and send out digital consent forms directly to parents. The system’s form creator allows school administrators to define the scope of consent and prefill key data (like names).

Tamper-proof and always up to date

Signed consent forms are then made tamper-proof using hashing technology, but parents are always able to revoke or modify the terms of their consent. Any changes are updated instantly in the LightRocket platform so consent statuses are kept up to date in real-time.

Compliance in every jurisdiction, with a full audit trail

With LightRocket, the privacy compliance minefield becomes a metaphorical ‘walk in the park’. The system bristles with configurable options, and our development team ensure workflows, data gathering and biometric scans are compliant with the privacy requirements of any given jurisdiction. If there are doubts or concerns, the system keeps logs and audit trails of all key activity, such as downloads and file shares.

What Our Platform Does

1. One library: All your school's photos and videos in one secure place, instead of spread across drives, inboxes and phones.
2. Accurate search: Find the image you need quickly, with tags, filters and search built for large collections.
3. Who can see what: Set permissions for staff, parents and year groups, so people see the photos meant for them and nothing else.
4. Sending files: Share photos through secure links, choosing whether each recipient can view or download.
5. Consent linked to the person: Every photo is connected to the consent of the people in it, and stays connected when that consent changes.
6. A record of what happened: A full audit trail shows what was shared, changed and approved, and when, so you can show your working if anyone asks.

Keeping Schools Safe and Student Privacy Protected

Beyond the efficiencies, compliance and simplicity LightRocket delivers, the system also has an ethical mission. It’s about keeping schools safe, protecting student privacy, providing secure spaces for parents, and alumni, to access the visual history of their children and institution.

If your school or university is still juggling forms and spreadsheets, we’d love to show you a simpler way. Book a free 30-minute demo.