The Consent Question: Who Decides What Family Stories Get Told and Shared?

When a shared photo includes children, aging parents, and multiple relatives, whose consent is required? A practical ethics framework for family memory.

KeepSaiQ Editorial8 min read

At a family graduation in 2019, three siblings took a group photo with their mother. The photo was beautiful — everyone looking at the camera at the same moment, which almost never happens. The eldest sibling posted it to Instagram before the cake was served.

Two weeks later, the youngest sibling — the one whose graduation it was — asked that it be taken down. He hadn't wanted documentation of his face on a public platform. He hadn't said so at the time because he hadn't wanted to create a scene.

The eldest sibling felt hurt. The middle sibling stayed quiet. The mother said she'd liked it either way. The photo came down. And the question underneath the photograph — who gets to decide? — went unanswered, as it almost always does.

Every family encounter that produces a photograph or a story involves multiple people with potentially different relationships to that memory. The person who took the photo. The people in it. The people who weren't there but who appear in the story. The person who was going through the hardest year of their life when the image was captured, and who has complicated feelings about that period being memorialized.

Most family technology handles this by ignoring it. Photos are uploaded by whoever has them. Stories are told by whoever tells them. The platform's consent architecture, if it has one at all, is designed around the poster's experience — not around the subjects.

This isn't primarily a legal problem, though law is starting to catch up. France passed legislation in 2024 that creates pathways for children to seek recourse when parents have shared images of them online without their consent. California, the United Kingdom, and the European Union have been developing children's privacy frameworks that take a child's interest in their own digital footprint seriously. GDPR already requires genuine consent for the processing of personal data about identifiable individuals — though most family photo sharing still happens in the gaps of that framework.

It's more fundamentally an ethical problem. And the ethics haven't had a practical framework that works at the kitchen-table level.

Children Are Not Blank Slates on the Subject of Their Own Images

The easiest version of the consent question is the one involving infants. Infants cannot consent, full stop. The decision is the parent's — though the ethical weight of that decision is real. A child's digital presence can begin at birth or before it, accumulating years of documented public childhood before the child develops a concept of privacy, let alone opinions about their own representation.

The question becomes harder — and more interesting — as children grow.

Developmental researchers have documented that children develop meaningful understanding of privacy concepts between roughly ages six and ten, and a more nuanced grasp of the difference between public and private contexts during adolescence. Priscilla Alderson, a sociologist who has written extensively on children's capacity for meaningful participation in decisions about themselves, argues that the standard assumption that children are too young to decide is often less true than it is convenient. Children's expressed preferences about whether they want their photo taken, or their story shared, deserve to be taken seriously as information — even when they don't yet carry legal weight.

This isn't an argument for giving ten-year-olds veto power over all documentation of family life. It's an argument for treating a child's expressed discomfort as real information, and for building habits of asking rather than assuming. A family that asks "is it okay if I share this?" — and takes the answer seriously — is building a relational norm that serves the child well across their whole childhood.

The UNICEF Convention on the Rights of the Child, ratified by almost every country in the world, establishes that children have the right to privacy and to be heard in decisions that affect them. These rights don't require a specific age threshold. They require calibration to the child's developing capacity.

When Family Members Disagree

The graduation photo problem — the story this essay opened with — is the most common shape of the consent problem in family life. Not a clear violation, not a deliberate harm, but a collision of legitimate interests that no one thought to negotiate in advance.

In the absence of explicit family norms about sharing, most families default to whoever is most enthusiastic. The person who wants to share posts the story. The person who would have preferred privacy didn't say anything until afterward, or didn't say anything at all.

The ethical default should run the other direction. When the interests involved in sharing a story or image are distributed across multiple people, the person with the most to lose from unwanted exposure should carry the most weight — not because their preference automatically wins, but because the asymmetry of harm runs in that direction. The discomfort of not sharing a photo is usually reversible: you could share it later, or in a different format, or with a narrower audience. The discomfort of unwanted exposure is much harder to undo.

One person's "no" should carry more weight than everyone else's "yes" — not because veto power is a good governance model for families, but because the costs of getting it wrong are not equally distributed.

This doesn't mean the "no" is always correct or final. Family relationships involve ongoing negotiation, and a reflexive veto of every family documentation project is its own kind of harm. The more productive frame is often not "should we share this" but "what would need to be true for everyone to feel comfortable" — a question that usually surfaces accommodations: a smaller audience, a different format, a decision to wait, a version of the story that includes the moment without including the details that feel most vulnerable.

The architecture of most platforms treats consent as a one-time event at upload. You share something; it's shared. The only subsequent question is whether to delete it.

But people change. The family member who was comfortable with a story being shared in 2018 may feel differently about it in 2024, after a life change that gives the story a different valence. The teenager who thought the childhood photo was funny may feel differently about it at twenty-five, in a professional context where the photo keeps resurfacing. The family story about addiction that seemed safe to document during recovery may feel violating if recovery falters.

Genuine consent architecture would allow people to revisit their choices — to request that something be made visible only to a smaller circle, or preserved only for the family rather than shared beyond it, or removed entirely from the shared record. This requires thinking of family memory not as content once created and then fixed, but as a living record that the people depicted in it have ongoing relationships with.

GDPR encodes this principle in law for personal data: individuals have the right to withdraw consent and to request erasure. For family memory systems, applying this principle means designing for revocability from the beginning — not as an afterthought or an edge case.

None of this requires a family to hold formal consent meetings before every photograph. What it requires is a set of habits and defaults that build a culture of asking.

Ask before posting, not after. The least invasive moment to check is before the image is shared, when the option to not share still exists. "Is it okay if I post this?" is a small question with significant effects on family trust over time.

Respect expressed preferences without requiring explanation. The youngest sibling in the opening story shouldn't have had to explain why he wanted privacy. "I'd rather it wasn't shared" is sufficient. Requiring people to justify their privacy preferences puts the burden in the wrong place.

Hold sensitive stories with more care than happy ones. A photo from a celebration carries different stakes than a story about a health crisis, a relationship difficulty, or a period of depression. The sensitivity of the content should scale the care with which consent is sought.

Treat older adults with the same care as children. The consent question for aging parents is often harder than the one for children, because the relationship has historically run the other direction: they were the authority. Asking an aging parent whether they want a story shared — and taking "no" seriously — is an act of respect that the relationship may not have practiced before.

Build in revisability. Store family memories in systems that allow the people depicted in them to affect how they're held and who can see them, long after the original capture. Memory systems that treat family members as audience rather than participants are missing the point.

The graduation photo is still on a phone somewhere. The youngest sibling is now thirty-one, and the relationship with his eldest sibling is fine — they got past it. But the question the photograph raised never received an answer the family could build on. That's the gap that a thoughtful consent practice fills: not preventing the photograph, but giving every person in it a real relationship with how it lives in the world.

Sources & further reading

  1. GDPR — General Data Protection Regulation (EU)
  2. UNICEF — Convention on the Rights of the Child
  3. American Academy of Pediatrics — Family Media Plan

Frequently asked questions

Who legally owns a family photo that includes multiple people?

In most jurisdictions, copyright belongs to the photographer — the person who pressed the shutter. But legal ownership is only one dimension of the ethical question. The people depicted in a photo have distinct privacy interests in how their image is used, interests that persist regardless of who owns the copyright. A parent may own the copyright to a photo of their child, but the child has a growing privacy interest in that image as they develop the capacity to form their own preferences about how they're represented.

At what age can children meaningfully consent to having their photos shared?

There's no universal threshold, but developmental research suggests children develop meaningful understanding of privacy concepts between ages six and ten, and a more nuanced grasp of public vs. private contexts during adolescence. What's clear is that consent is a spectrum, not a binary: younger children can express discomfort or enthusiasm that deserves to be taken seriously, and teenagers can form genuine, articulate preferences about their own representation that deserve more than parental veto.

What should families do when they disagree about sharing a story or photo?

The most defensible default is to defer to the person who would be most affected by exposure, especially when that person has expressed a preference against sharing. The discomfort of not sharing a story is usually smaller than the harm of sharing it without consent. For ongoing disagreements, the most productive framing is usually not 'should we share this' but 'what would need to be true for everyone to feel comfortable' — a question that often surfaces workable accommodations like a smaller audience, a delayed timeline, or a different format.

What about stories that involve someone who has died?

Posthumous privacy is genuinely complex. Many people have intuitions that death doesn't automatically make private stories public, especially within short timeframes. Some families have explicit conversations about what a deceased member would have wanted shared. Others rely on what's sometimes called 'contextual integrity' — asking whether this story would have been shared by the person themselves, and in what contexts. Where there's uncertainty, erring toward protection rather than publication is usually the more reversible choice.

How should families handle stories involving members with cognitive decline?

Cognitive decline doesn't eliminate personhood or privacy interest — it complicates the assessment of expressed preferences. Best practice from bioethics applies here: look first for any previously expressed preferences (conversations about privacy, documented wishes), then ask what the person would likely have wanted based on their lifelong values, then make decisions with the person's dignity as the primary frame, not the convenience or emotional needs of others. 'They don't mind anymore' is not a standard.