Is your crèche's Facebook page legal under POPIA?

Scroll through any South African crèche's Facebook page and you'll find them: first-day photos, messy-play albums, graduation ceremonies. Parents love them. New parents choose centres because of them. And under POPIA, most of them were posted without the consent the law requires.

That's not a scare line — it's how the Act is written. This guide walks through what the law actually asks of you, what valid consent looks like, and how to keep the photos without keeping the risk.

What POPIA says about children's photos

A photo of a child is personal information, and POPIA gives children's information special protection. Section 34 prohibits processing a child's personal information — and posting to a Facebook page or a WhatsApp status is processing. Section 35 lifts that prohibition only in narrow cases, and for showing off your centre exactly one of them applies: prior consent from a competent person — in practice, the child's parent or legal guardian.

Note the word prior. Consent collected after the album is already up doesn't repair the posts that came before it.

Why “the parents are fine with it” doesn't count

POPIA defines consent as a voluntary, specific and informed expression of will. Each of those words disqualifies a common habit:

• Voluntary — a photo clause buried in enrolment terms, where saying no means losing the place, isn't freely given.
• Specific — one blanket “photos may be taken” line doesn't cover marketing. Consent for a class album is not consent for a public Facebook page.
• Informed — the parent must know where photos will appear, and for what purpose, before they agree.

The Act adds two more teeth. If it's ever disputed, the burden of proof is on you — a verbal “ja, that's fine” at pickup proves nothing years later. And a parent may withdraw consent at any time, which means you need a way to actually stop using the photos when they do.

The photo-consent checklist for your centre

1. Get it in writing, per child

   One signed form per child, from a parent or legal guardian, before the first photo is shared anywhere.

2. Name the places

   The form must say where photos go — the centre's app, its Facebook page, WhatsApp statuses, printed material — as separate choices, not one bundle.

3. Record the details

   Who consented, for which child, on what date. Keep the forms where you can find them in five minutes, not in a box in the storeroom.

4. Honour withdrawal

   When a parent changes their mind, stop new posts immediately, take down what they ask you to, and note the date.

5. Check before every post

   Whoever runs your Facebook page needs the consent list in hand — not in their memory.

None of this strictly needs software. A file of signed forms and a careful admin can satisfy POPIA. What software changes is whether the checking still happens on a busy Tuesday.

How KidzOffice handles this by construction

We built the consent question into the product's foundations, because a rule that depends on someone remembering it will eventually be broken:

• Every child carries a consent record — whether photos are allowed, the date it was decided, and who decided it: a parent directly, or a staff member recording a signed form.
• No consent, no photo — enforced by code. If a child's record says no, or says nothing, the app will not display that child's photos. It isn't a policy staff follow; it's a rule the system can't break.
• A parent's withdrawal wins, instantly. When a parent revokes consent, photos stop showing everywhere in the app. No meeting, no cleanup project.
• The privacy conversation happens on day one. POPIA consent is captured at enrolment, with a date — not retrofitted when someone asks.

Inside the app, that means the photos parents love — arrival smiles, messy play, the nap-time victory — reach their phones every day with the consent proved by construction. And the same discipline, applied to your public pages with the form above, makes the marketing photos safe too. That's the flip: photos stop being your biggest hidden liability and become the safest way you have to show your centre's day.

This guide is general information for South African ECD centres, not legal advice.