Do you need a photo release for employees?

In practice yes, if the photo is identifiable and you are publishing it. In the EEA a photograph of an identifiable person is personal data, so you need a lawful basis, and for marketing use that is almost always consent. Several countries then add a second, separate image right on top: portretrecht in the Netherlands, §22 KUG in Germany, droit à l'image in France. A data-protection consent form does not release those. That is why one combined document is safer than a privacy consent alone.

What is an employee release form?

A short agreement in which an employee permits their employer to record and publish their image, and increasingly their voice and synthetic likeness, in specified materials. A usable one states what is being recorded, where it will appear, for how long, in which territory, whether anything is paid for it, and how the person withdraws.

Can I make my own photo release form?

Yes. There is no prescribed format in any of these countries, and this generator produces one. The requirements that do bite are about substance rather than form: consent must be specific, informed, granular and withdrawable without detriment, and in Germany it must be in writing and given separately from the employment contract. Have a lawyer check the result before you rely on it at scale.

Does a standard photo release cover AI-generated video?

Almost certainly not. Standard releases predate generative AI and permit publication of a recording, not the creation of a synthetic performance from it. German constitutional case law recognises a distinct right against manipulative distortion of one's likeness, so consent to use a photo is not consent to animate someone saying things they never said. If you are generating an avatar, the release has to say so explicitly.

Do I need to label an AI-generated job ad?

If the ad contains a realistic AI-generated or manipulated depiction of a person, yes. Article 50(4) of the EU AI Act requires deployers to disclose artificially generated or manipulated content, and it has applied since 2 August 2026 with no grace period. The obligation sits with the advertiser, and both an employer and its agency can be deployers.

Does consent end when the employee leaves?

Not automatically everywhere, but do not rely on it continuing. German case law lets consent survive termination only where the material is purely illustrative and the person is not highlighted or named, the opposite of a featured presenter in a job ad. Assume a departing employee can withdraw, and keep a route to pull the assets.

Free tool

Employee photo release form

Generate a signable image and likeness release for an employee, including AI-generated avatars and synthetic presenters, which standard photo release templates do not cover. Answer a few questions, download the .docx or PDF.

It runs entirely in your browser. Nothing you type is uploaded, stored or sent to us, which felt like the only defensible way to build a consent tool.

Company name

Person's full name

Country

Changes which image-rights clauses appear.

Their status

What are you recording?

How is AI involved?

Their likeness drives a generated presenter.

Their likeness is used to train or fine-tune a modelLeave this off if you generate from a reference image each time. It matters more than anything else on this page.

Are you paying for the advertising use?

Amount

Duration

Ends on

Territory

Date signed

Where will it be used?

Be specific. Vague scope is the most common reason a release fails.

In the Netherlands the portrait right (portretrecht, Art. 21 Auteurswet) runs alongside GDPR consent and is not released by it, which is why this document covers both. Note also that a portrait is an image of a recognisable person 'op welke wijze ook vervaardigd', however produced (HR 22 April 2022, Verstappen/Picnic), which on its face reaches AI-generated likenesses.

A synthetic presenter built from a real person is a deep fake under Art. 3(60) of the EU AI Act, and Art. 50(4) has required deployers to disclose that since 2 August 2026. That duty is yours as the advertiser, and it had no grace period. Label the output.

Consent from an employee is presumptively fragile in the EEA because of the imbalance of power: it is valid only where refusing carries no adverse consequence at all. Make refusal genuinely costless and be able to show that you did.

Generated in your browser. Nothing is uploaded.

Image, Likeness and Synthetic Media Release

This release is given by [Full name] ("I", "me") to [Company name] (the "Company") on [date].

1. What I am agreeing to

I agree that the Company may record, reproduce, publish and distribute photographs and video and moving-image recordings of me, and may use my name, image, likeness and (where recorded) voice in the Company's recruitment advertising, careers site, social media and employer-branding materials.

Territory: worldwide.

Duration: this release runs until [end date], and until then may be withdrawn in accordance with section 4.

2. Artificial intelligence

I specifically agree that the recordings described above may be used as the input to generative artificial-intelligence systems to produce a synthetic presenter, avatar or animated likeness of me, including images and performances I did not actually perform.

• I understand that this means material may be published showing me saying or doing things I did not say or do, and that such material may be indistinguishable from a genuine recording.

• The Company will disclose that such material is artificially generated or manipulated, in a clear and distinguishable manner, at the latest at the time of first exposure.

• The Company will not use my synthetic likeness in political, religious or sexual content, in any endorsement of a third party's product, or in any context that would reasonably damage my reputation.

• The Company will not licence, sell or sub-licence my synthetic likeness to any third party.

• My likeness will be used only to generate specific approved assets. It will not be used to train or fine-tune any artificial-intelligence model, and will not be retained as model training data.

3. Payment

In consideration of this release the Company will pay me [amount]. This payment is specifically for the advertising and promotional use described above, and is separate from my salary or any other entitlement.

4. Withdrawing this release

I may withdraw this release at any time, in writing, without giving a reason.

• On withdrawal the Company will stop producing new material using my likeness, and will remove published material from channels under its control within 30 days.

• The Company will make reasonable efforts to recall material already distributed to third parties, but I accept that copies already downloaded or re-shared by others may not be recoverable.

• Withdrawal does not affect the lawfulness of use before I withdrew.

• Giving, refusing or withdrawing this release will have no consequences for my employment, pay, evaluation or progression.

• This release does not continue automatically after my employment ends. If I leave, the Company will stop using material in which I am individually identifiable or featured, unless I confirm otherwise in writing.

5. Data protection and image rights

The Company is the controller for the personal data described here. The legal basis is my consent under Article 6(1)(a) GDPR, and I have been informed of my right to withdraw it at any time under Article 7(3). The Company's privacy notice explains retention, recipients, any transfers outside the EEA, and how to complain to a supervisory authority.

Separately from data-protection consent, I consent under Article 21 of the Auteurswet (portretrecht) to publication of my portrait for the purposes described in this release. I understand that a portrait includes an image of me however it was produced, including a generated or synthetic likeness.

6. General

• I confirm I am giving this release freely, and that I was given a real opportunity to refuse it.

• I have been given a copy of this release, and I can ask for a copy again at any time.

• This release is governed by the laws of the Netherlands.

Signatures

[Full name], date

For and on behalf of [Company name], date

Why a standard photo release is not enough any more

Most photo release form templates in circulation were written for photographers, schools and events. They permit publication of a recording. They do not address what happens when that recording becomes the input to a generative model, and that is now the common case in recruitment marketing.

A synthetic likeness is still their likeness

Two legal systems reached this independently, decades before the technology existed. The Dutch Supreme Court holds that a portrait is an image of a recognisable person however produced, and that a viewer knowing it is not really them does not stop it being their portrait. German case law from 1999 holds that a lookalike deceptively similar to a person is a portrait of that person. On their face, both reach AI-generated likenesses.

Data-protection consent is only half of it

In the Netherlands, Germany and France the image right sits outside the GDPR and is not released by a privacy consent form. You need both. The generator above produces a document that covers both, and adds the German written-form and standalone-consent requirements when you select Germany.

Employee consent is fragile by default

European regulators are consistent that consent given by an employee is presumptively weak, because refusing your employer is not a free choice. It is valid only where refusal carries no adverse consequence at all. Practically: make refusing genuinely costless, keep the request separate from the employment contract, and be able to show that you did.

Do not reuse a photo taken for something else

The Dutch regulator says this in plain terms: consent for an internal staff directory covers the staff directory, and does not let you put the same photo on your public website. A paid ad campaign is a new purpose, and feeding it to a generative model is a third one. Each needs its own consent.

The training question is the one that bites

If you fine-tune a model on someone’s face, you cannot cleanly honour a withdrawal request, because the likeness cannot currently be removed from the trained weights, a point the Dutch DPA made directly in July 2026. Generating from a reference image at the point of use avoids the problem entirely. It is the single most consequential architecture decision in this area.

This tool and this page are information, not legal advice. The law here differs by country and is moving quickly. Have your own lawyer review the output before you rely on it.

Common questions

Do you need a photo release for employees?: In practice yes, if the photo is identifiable and you are publishing it. In the EEA a photograph of an identifiable person is personal data, so you need a lawful basis, and for marketing use that is almost always consent. Several countries then add a second, separate image right on top: portretrecht in the Netherlands, §22 KUG in Germany, droit à l'image in France. A data-protection consent form does not release those. That is why one combined document is safer than a privacy consent alone.
What is an employee release form?: A short agreement in which an employee permits their employer to record and publish their image, and increasingly their voice and synthetic likeness, in specified materials. A usable one states what is being recorded, where it will appear, for how long, in which territory, whether anything is paid for it, and how the person withdraws.
Can I make my own photo release form?: Yes. There is no prescribed format in any of these countries, and this generator produces one. The requirements that do bite are about substance rather than form: consent must be specific, informed, granular and withdrawable without detriment, and in Germany it must be in writing and given separately from the employment contract. Have a lawyer check the result before you rely on it at scale.
Does a standard photo release cover AI-generated video?: Almost certainly not. Standard releases predate generative AI and permit publication of a recording, not the creation of a synthetic performance from it. German constitutional case law recognises a distinct right against manipulative distortion of one's likeness, so consent to use a photo is not consent to animate someone saying things they never said. If you are generating an avatar, the release has to say so explicitly.
Do I need to label an AI-generated job ad?: If the ad contains a realistic AI-generated or manipulated depiction of a person, yes. Article 50(4) of the EU AI Act requires deployers to disclose artificially generated or manipulated content, and it has applied since 2 August 2026 with no grace period. The obligation sits with the advertiser, and both an employer and its agency can be deployers.
Does consent end when the employee leaves?: Not automatically everywhere, but do not rely on it continuing. German case law lets consent survive termination only where the material is purely illustrative and the person is not highlighted or named, the opposite of a featured presenter in a job ad. Assume a departing employee can withdraw, and keep a route to pull the assets.

The release covers you. We make the ad.

RecruitmentAds turns a job post into on-brand video and static ads for Meta and LinkedIn, with locked templates and approved assets so the output stays inside your employer brand.

See how it works