01
What does treating video as personal data mean?
That you need a lawful reason to hold it, that the people in it have rights over it including asking for a copy or its deletion, and that you should keep it no longer than needed. There is a purely personal exemption in several regimes, and publishing to an audience generally falls outside it.
02
What the rules attach to
The purely personal exemption is narrower than people hope, and publishing to an audience generally falls outside it.
| Material | Personal data? | Obligations follow? |
|---|---|---|
| An identifiable face | Yes | Yes |
| A recognisable voice | Yes | Yes |
| A person described but not shown | Often yes | Often |
| A crowd where nobody is identifiable | Usually not | Usually not |
| Genuinely anonymised material | No | No, if genuinely anonymous |
03
Practical steps for small creators
Keep a short note of what you record, why and where it is stored. Delete raw footage you no longer need, especially footage of people who are not the main subject. Tell people when you are recording, and explain where the material might appear.
Make it easy to contact you. A visible email address or a contact form on your profile lets people ask for a correction or removal, which is one of the rights these rules protect.
Think about the people in the background as well as the main subject. Passers-by, audience members at an event and colleagues walking behind an interview are all identifiable people. Framing tightly, choosing quieter locations and blurring faces that do not need to be seen reduce the number of people whose data you hold without their knowledge, which is both kinder and simpler.
04
Handling a removal request
If someone asks to be removed from a clip, respond promptly and politely. In many cases the simplest solution is to take the clip down or edit them out. Keep a record of the request and what you did about it.
Some requests may conflict with other interests, such as reporting on a public figure. In those cases, check the guidance that applies to you before deciding.
05
Storing recordings safely
Recordings of identifiable people should be stored securely: password-protected accounts, encrypted drives where possible and limited sharing. A lost laptop full of unencrypted interview footage is exactly the kind of incident data rules are designed to prevent.
Share raw footage with editors or partners through controlled links that can be revoked, rather than sending copies by email.
06
Children and sensitive situations
Recordings involving children, health information, religious beliefs or other sensitive categories carry extra obligations in many regimes. Get explicit consent from a parent or guardian for minors, and think carefully about whether the person needs to be identifiable at all.
When in doubt, anonymise or leave the person out.
07
Know why you hold it
- Know why you are keeping each recording. A stated reason is the foundation of the rest.
- Have a way to handle a deletion request. Improvising one under pressure is worse.
- Do not keep raw footage forever without reason. Retention is part of what these rules govern.
Clip what you have a reason to keep.
Questions people ask
- Does this apply to a small creator?
- The personal use exemption is narrower than people hope, and publishing to an audience generally sits outside it.
- Does it apply outside Europe?
- Similar regimes now exist in many countries, with differences in detail. Where your audience is can matter as well as where you are.
- What if someone asks to be removed?
- Several regimes give a right to request erasure, subject to exceptions. Having a process makes it routine.
- Do I need consent to record someone?
- Consent is one lawful basis among several, and it interacts with the separate recording consent rules.
- Is this legal advice?
- No. Data protection is genuinely technical and anything at scale deserves proper advice.