May a school post photos of my child?

Photos of children under 16 are specially protected. GDPR (Art. 8) states: consent for processing must come from the parent/guardian. What that means in practice? A school may NOT post photos of your child without written consent on: school website, school app, social media (Facebook, Instagram), newsletter, school guide, yearbook, or by third parties such as a photographer at school events. The consent must be specific: not "I consent for the whole school year for all uses". That's invalid GDPR consent. Per publication type and per channel. Best practice: school sends a form with categories — "class photo for yearbook", "publication on school website", "school social media" — and you tick yes/no per item. Withdrawal always possible: later you can say "stop using that photo" and the school must remove within reasonable time. For children 16+: the child may consent personally, but in practice parents are still often involved. School events with external photographer: that photographer also needs consent. Often arranged via a DPA — ask about it. If the school does it anyway? Written removal request to the principal + DPO. No action? Complaint to AP — schools misusing child photos are an AP enforcement priority and fines occur. Special groups: separated parents typically need both parents (joint custody). With guardianship: the guardian. Child protection orders: complex — engage youth services or a lawyer.