Safeguarding by Design: Why the Best School Marketing Now Shows Fewer Faces, Not More

For years, the instinct in school marketing was simple: more faces, more warmth, more enquiries. In 2026, that instinct needs updating.

Three things changed at once this year. The threat became real, a UK secondary school was targeted in an AI-enabled blackmail attempt using pupil photos lifted straight from its own website and social channels, with the Internet Watch Foundation classing 150 AI-manipulated images from that single incident as child sexual abuse material under UK law. The guidance caught up, Keeping Children Safe in Education 2026 now explicitly brings digitally altered and AI-generated images of children into safeguarding, and the NCA, the IWF and the Early Warning Working Group have advised schools to move away from clear, face-on pupil photos online. And the platforms are being regulated, with restrictions on social media for under-16s following the Children's Wellbeing and Schools Act 2026.

Put plainly: the imagery decisions that used to sit with the marketing team now sit squarely inside safeguarding.

Consent was never the whole answer

A signed photo permission form tells you a parent agreed. It does nothing to stop that image being copied, altered or used to locate a child. Search data, backlinks, metadata, uniforms, names and geotags all add to a child's digital footprint — and they compound. Six years of sports day photos, nativity plays and newsletter write-ups can tell a stranger a great deal more about a child than any single image ever could.

Move beyond asking whether you have permission to share an image. Ask whether sharing it is necessary - Tes

The framework: Safeguarding by Design

Loughborough Schools Foundation has been ahead of this curve for some time, and their approach, alongside guidance from ISBA and AMCIS, has shaped a framework we've been using with our own school clients: Safeguarding by Design. It rests on one question, applied to every image before it's published:

Is publishing this necessary, proportionate, and in the child's best interests?

If the honest answer to any part of that is "no" or "not sure", the answer is a lower level of imagery, or not publishing at all.

Four levels, and a ladder worth climbing down

Not every piece of storytelling needs an identifiable child in it. We think about imagery in four levels, starting from the least identifiable:

• Governed AI library - bespoke, school-specific scenes generated to the uniform and grounds, never created from a real pupil.
• Illustrative imagery - the building, the equipment, the work itself. Brand-led and endlessly reusable, no permission needed.
• Privacy-first photography - backs of heads, side profiles, hands at work, distance shots. Carries most everyday storytelling with no face in focus.
• Authentic photography - real, identifiable moments, used sparingly and deliberately for genuine achievements, always with the right permission.

The instinct used to be to reach straight for level one. The better habit is to start at level three or four, and only move up when an identifiable child genuinely adds something the lower levels can't.

Two tiers of permission, matched to risk

An annual Tier 1 permission covers lower-risk, expected uses - closed-community sharing, internal displays, and privacy-first imagery on any channel. Tier 2 is specific, case-by-case consent, sought from both pupil and parent, for identifiable images on open channels: the website, public social media, adverts, printed press. The rule of thumb is straightforward - closed and non-identifying sits under Tier 1, open and identifiable needs Tier 2, and permission for one use is never treated as permission for another.

Does it actually still work?

This is usually where the objection lands: won't this quietly starve the marketing engine? The evidence so far says no. After moving away from close-up and full-face pupil imagery on open channels, Loughborough Schools Foundation saw social impressions rise despite fewer posts, LinkedIn engagement grow as staff expertise took centre stage, and open-day attendance increase by more than 20% against national trends. Parents reported feeling reassured, not short-changed.

The explanation isn't complicated. Families were never choosing a school because of a close-up on Instagram. They choose because they trust the people, feel the atmosphere, and believe their child will thrive there - and every one of those things can be shown without a child's face in the frame.

Where to start

You don't need to fix everything in a week. A structured 90 days gets the highest-risk content down quickly and the right habits in place for good: audit every channel where pupil imagery appears in the first month, update your image policy and launch a proper Tier 1/Tier 2 process in the second, then brief staff and suppliers and tell parents what's changed in the third.

We've put the full framework - the four levels, the two-tier permission model, a 90-day plan and the checklists worth pinning up — into a free white paper, Safeguarding by Design™. It's built for heads, bursars, DSLs, DPOs, governors and marketing teams to work through together, because ownership of pupil imagery has always extended well beyond the marketing office.

Get the full Safeguarding by Design™ white paper, free, from our Resources Hub, along with the rest of our guides and checklists for independent schools.

pulse-marketing.co.uk/resources