Why this catches people out

Most people assume there's some rule against using a photo of someone without asking first. In the UK there isn't, not as a single law. There's no general right to your own image, and no personality right of the kind that exists in some other countries. Being in a photograph doesn't, on its own, give you any control over what happens to it afterwards.

That doesn't mean a meme built from someone's photograph is automatically fine to post. It means the question moves somewhere else. What actually governs it depends on details like who took the photograph, whether the person in it can be identified, and what the meme says or implies about them.

What decides the answer instead

Copyright, data protection, defamation and passing off each cover a different slice of this, and each has its own test. Which one applies, and how strongly, depends on the specific photograph and the specific meme. That's worth knowing before you assume a photo is either completely safe or completely off limits, because in most cases it's neither.

The photographer owns the copyright in a photograph, not the person standing in it. That's true even if the photo is of you, was taken on your phone by someone else, or has been circulating online for years with nobody credited. The person who pressed the shutter holds the rights, and those rights sit separately from anything the picture shows.

What this means for a meme made from someone else's photo

If you didn't take the photograph, you're generally using someone else's copyright work. The subject having no objection, or even actively wanting the meme made, doesn't change who holds the copyright. It also works the other way: the subject of a photo has no automatic right to stop it being used, because copyright was never theirs to assert.

Whether a particular use of that photograph is lawful depends on the exceptions that apply to copyright works generally, including the parody exception, which is covered on its own terms elsewhere on this site.

Finding out who the photographer is

A lot of the images that end up in memes have no obvious photographer attached by the time they're several shares deep into a group chat or a meme account. That doesn't mean the copyright has lapsed. It usually means the attribution has been lost along the way, and the rights are still sitting with whoever took the picture, or whoever they've since assigned them to.

Data protection law only gets involved once two things are both true: the person in the photograph can be identified, and the meme is not being made and shared for purely personal or household purposes. Miss either condition and this branch of the law simply does not apply, whatever copyright or defamation might say about the same image.

What counts as identifiable

A face is the obvious case, but it is not the only one. Someone can be identifiable from a name in the caption, a uniform, a location, or context that anyone in the group chat would recognise, even with the face blurred or cropped. The test is whether a person could be singled out.

What counts as purely personal

Sharing a meme with a handful of friends in a private chat, for a joke among people who already know each other, sits inside the personal and household activity exemption in Article 2(2)(c) UK GDPR. Posting the same image to a public account, a group with open membership, or a page run in someone's professional or organisational capacity generally does not, because the activity has moved beyond the personal sphere.

Where this bites in practice

The line matters most for the second reader this page is written for: someone posting under a society or business account. An identifiable colleague, member or customer in a meme posted from an organisational account is much more likely to fall inside data protection law than the same image sent between friends, and the risk that follows sits with whoever controls that account. Memes on a Business or Organisation Account covers what changes when the account posting is not a personal one.

This page sets out where the threshold falls. Whether a particular photograph and a particular use land on one side of it or the other depends on facts a page like this cannot see, and that judgement is where a solicitor's advice earns its keep.

A meme can be legally clean under copyright and still cause a real problem, because defamation and passing off sit outside copyright entirely. Both are about what the meme says about a person.

What defamation actually catches

Defamation covers a statement that carries an imputation harming a person's reputation, meaning it suggests something about them that a reasonable person would think less of them for. A meme is a statement for this purpose even though it is mostly a picture. Putting words next to someone's face that accuse them of dishonesty, incompetence or wrongdoing can carry that imputation, whether the words are meant as a joke or not. Intent to be funny is not a defence to what the words actually assert.

Take a worked example. A photograph of a named local councillor captioned to suggest they took a bribe, shared on a community Facebook group, carries a specific factual imputation about that person's conduct. Whether it is defamatory depends on what a reasonable reader would take it to mean. A caption that mocks someone's dress sense or their reaction in a photo sits in different territory, because ridicule alone does not usually carry an imputation about reputation in the same way an accusation does.

What passing off has to do with a meme

Passing off is usually explained as a business dispute about get-up and goodwill, but the underlying idea travels: it protects against a false suggestion that one person or thing is connected with, or endorsed by, another. A meme that uses a recognisable person's photograph in a way that implies they said, made or endorsed something they did not can raise the same kind of problem, particularly where the person has a public reputation or following that gives their name commercial value. The risk rises sharply where the meme is used to promote a product, event or cause, because that is exactly the connection passing off exists to stop someone falsely claiming.

A meme suggesting a celebrity personally recommends a product, built from a photograph of them and posted on a brand's account, sits much closer to that line than the same photograph shared as a joke between friends with no promotional angle. The account posting it matters as much as the image itself.

Where this leaves you

Neither of these turns on whether you own the rights to the photograph. You can clear the copyright question entirely and still have a meme that defames someone or falsely implies their endorsement. The practical marker to watch for is whether the meme asserts something about the person, true or false, or suggests they are connected with something they are not. Where it does either, that is the point at which the facts stop being something to guess at and start being something to take advice on, particularly if the account posting it belongs to an organisation. For that account-holder risk specifically, Memes on a Business or Organisation Account sets out who carries it inside an organisation.