Hi there - just after a bit on insight over this. GDPR legislation comes into effect in May 2018 - https://www.eugdpr.org/ basically tightening up data protection regulations massively. I've tried doing some research into this regarding the following, but can't seem to find a definitive answer:

I do a lot of work designing websites for small businesses. For the sites a lot of the time these businesses want galleries of their own work (lovely shots of fencing and clean drains!). Ok, that's easy, send them to me and I'll set up the page for you.

My question is to comply with GDPR would I need to append either Alt Text to the image identifying the subject / who supplied it or/and would I need to ensure the relevant information is added to the image in the meta data as well - (file info fields in Photoshop / IPTC captions)?

I'm guessing a picture of a landscaped garden with differ from one with an identifiable house '/' person in the background:

https://www.eugdpr.org/gdpr-faqs.html

What constitutes personal data?

Any information related to a natural person or �Data Subject�, that can be used to directly or indirectly identify the person. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer IP address.

If anyone does have knowledge on this, it would great if you could let me know what you think. I know there are lots of huge companies out there who design websites, containing both stock and customer supplied pictures - interested what this will mean to them.

Thanks - Oldhand