This article is general information only, not legal advice. For compliance questions specific to your business, consult a qualified data protection adviser.
When dealers think about GDPR and listing photos, they think about number plates — and we have a full article on plates, so this one will not repeat it. But the plate is not the only piece of potentially personal data that ends up in a car photo. Walk through a typical dealer's gallery and you will find staff reflected in paintwork, customers in the background, the previous keeper's parking permit still on the windscreen, and the occasional letter on a passenger seat.
This article covers the rest of the frame: people, places, reflections, and what's inside the car. It is part of our wider guide to AI car photos for dealers.
The one-paragraph legal basis
Personal data under UK GDPR is information relating to an identified or identifiable living individual — and identifiability includes indirect identification, where one piece of information combined with others singles someone out (ICO — What is personal data?; ICO — Can we identify an individual indirectly?). Publishing a listing photo on a national portal is processing. If the photo contains personal data, that processing needs a lawful basis — and "we didn't notice it was in shot" is not one.
The practical good news: almost everything in this article is solved by the same small set of fixes, covered at the end.
People in shot
This is the clearest case. The ICO's advice on photography is direct: if someone can be recognised from a photograph, it is usually their personal data (ICO — Taking photographs: data protection advice). The guidance is written for schools, but the principle it states is general.
On a forecourt, identifiable people get into listing photos three ways:
- Staff — a colleague mid-walk behind the car, or the photographer's own face caught in glass.
- Customers — browsing in the background while you shoot fresh stock. This is the worst version: a member of the public, photographed without their knowledge, published on a national portal in connection with a place they visited.
- Passers-by — anyone on the pavement behind an outdoor shot.
Context matters in data protection — the ICO's indirect-identification guidance includes an example of a beach photograph published by a journalist where identifiable individuals appear but nothing is being recorded or decided about them. But a dealer's safest and simplest position is not to litigate context at all: if a recognisable person is in your listing photo, fix the photo. The car sells exactly as well without them, which makes them impossible to justify as necessary — and removing them costs seconds.
Houses, streets and location context
A house in the background of a car photo is not, by itself, personal data — a building is not a living individual. So the home-delivery shot or the photo taken outside a part-exchange customer's address is not automatically a GDPR problem.
But the ICO's indirect-identification guidance is built around exactly this kind of combination risk: information that does not identify anyone alone can do so when combined with other available information (ICO — Can we identify an individual indirectly?). A photo showing a distinctive house, with a visible door number or street sign, published alongside a listing that mentions the vehicle's history, starts assembling pieces. We would frame the risk honestly: usually low, rarely zero, and entirely unnecessary — the buyer does not need to see where the previous keeper lived, and a clean background serves the listing better anyway.
The simple rule: photograph stock at your premises or against a neutral setting, and treat any photo taken at a customer's address as not for publication.
Reflections — the one everyone misses
Modern car paint and glass are mirrors. The most common identifiable person in dealer photos is not behind the car — it is on it: the photographer reflected in a tailgate, a colleague in the side glass, a customer in dark paintwork.
The legal analysis is the same as for people in shot — a recognisable reflected face is still a recognisable face. The practical analysis is worse, because reflections survive casual review. Dealers check the background and miss the bodywork. If you shoot dark cars in particular, make "check the paint and glass for people" an explicit step before publishing. (It is also simply better photography — our interior photography guide covers reflection control as a craft issue, not just a privacy one.)
Inside the car: the part-exchange problem
Part-exchange cars arrive as someone's recently personal space, and interiors get photographed fast. Things we have seen in real listing photos:
- Post with a name and address on the passenger seat
- V5C or service paperwork in the door pocket
- A work parking permit with name and employer on the windscreen
- Child seats, prescriptions, ID lanyards
A name and address on a visible envelope is straightforwardly personal data — direct identification, no combination needed. This is the highest-severity item in this article, because it is the previous keeper's information, published without their knowledge, in a context they never agreed to.
The fix is process, not technology: clear the car before you photograph it, and look at every interior shot before it goes up. Our part-exchange photo guide builds this into the full prep workflow.
The fixes, ranked
- Reshoot. If a person walked into frame, take the shot again. Free, instant, perfect.
- Clear the car first. Interiors get emptied of the previous keeper's items before the camera comes out.
- Crop. If the issue lives at the edge of frame, cropping it out may cost nothing.
- Replace the background entirely. AI background replacement removes the environment context as a category — the forecourt, the street, the house, the bystanders all go, replaced with a studio setting. One pass closes every "what's behind the car" question in this article at once. What it does not touch is the car: your own pixels of the vehicle are composited across unaltered, so anyone reflected in the paintwork or the glass is still there in the output. Check the finished image for surviving reflections before publishing.
- Cover the plate while you're at it. The same processing pass that replaces the background can apply a branded plate cover — the full reasoning is in the number plate GDPR article, and the feature itself is here: how Motuva handles plate covers.
The short version
GDPR exposure in car photos does not end at the number plate. Recognisable people — including reflected ones — are usually personal data; location context is a combination risk worth removing on principle; and the previous keeper's paperwork in an interior shot is the most serious and most avoidable mistake of all. Clear the car, check the frame, check the paint, and use a clean background so the question never arises.
This article reflects general best practice and publicly available ICO guidance as of 2026. It is not legal advice. If you have specific compliance concerns about GDPR and photography in your operation, consult a qualified data protection adviser. ICO guidance: What is personal data? · Indirect identification · Taking photographs.
Related reading
A practical guide for UK dealers on what AI car photo tools do, what's legally and ethically fine, where the lines are, and how honest dealers use them.
Visible plates in dealer listing photos raise privacy issues. What UK GDPR says, what best practice looks like, and how to handle plates automatically.
Part exchange photos need to happen fast — the car arrives at handover and every day unlisted costs money. A workflow for getting PX stock live quickly.
A practical guide to car interior photography for dealers — angles, light, prep, and what interior photos actually do for buyer confidence before any viewing.