May the school publish photos of my child?

School photos on website, social media, yearbook, brochures = UAVG Art. 5 (under 16 parent) + GDPR Art. 6/7 explicit consent. Requirements: (1) Per medium separately asked — website ≠ Instagram ≠ yearbook. Not "general consent". (2) Per child individually — not "all parents who don't respond in 14 days consent" (silence ≠ consent). (3) Withdrawable Art. 7(3) — school must delete within reasonable time. (4) Privacy statement describes process transparently. Best practice: annual opt-in form — not once at registration then assume for years. What is NOT allowed: "for recognition on WhatsApp group" without consent, school Instagram with names, yearbook with photos of pupils now at another school. On erasure request: delete within 30 days — physical yearbooks can be demanded for destruction or reprint (exception justifies). Education Inspectorate + AP priority 2024-2025: child data enforcement is high. School fines 2024 €25k-€150k.