Filming youth football: UK GDPR, consent and AI analysis

Why filming youth football is a data protection matter

A photo or video in which a person can be identified is personal data. When a club films matches for coaching, streams them or uploads them to an analysis platform, it is processing children's personal data and must follow UK data protection law: the UK GDPR, the Data Protection Act 2018 and the changes made by the Data (Use and Access) Act 2025, most of whose data protection provisions came into force on 5 February 2026.

There is one important exception. Photos and videos taken by parents for personal or family use, such as a family album, fall outside data protection law, as the ICO explains in its advice to schools. A club can still set rules for its events, but those are club rules, not legal duties. Once the club itself films, publishes or analyses footage, the law applies.

Lawful basis: consent is not the only option

Many clubs assume they need consent for everything. Consent is one lawful basis, but it must be freely given and can be withdrawn at any time, which makes it awkward for match footage that includes the whole team.

• Legitimate interests is often more practical for coaching video. The FA's guidance on photographing and filming children says consent may not be the most practical basis and that legitimate interest may apply, provided the club explains the basis from the outset.
• Offer an opt-out anyway. The FA recommends an opt-out even when consent is not the lawful basis, and the ICO's school guidance makes the same point for promotional use of images.
• Consent for publication. For publishing a child's image in the public domain (website, social media, press), the FA guidance asks clubs to hold written parental consent, and not to publish a child's name with the image without it.
• Age 13. In the UK, children aged 13 or over can give their own consent to online (information society) services where consent is the basis; younger children need consent from a parent. This applies to online services, not to every use of a photo.

Whatever the basis, explain it in a privacy notice written for parents, in plain language, before the season starts.

What the FA's safeguarding guidance asks of clubs

The FA's Guidance 8.3 on photographing and filming children is the reference for affiliated clubs in England. Its main points for match and training video are practical:

• Tell players and parents that filming is part of the coaching programme.
• Inform the opposing club before filming a match, consider any concerns, and film only where necessary.
• For analysis cameras, minimise close-ups of individual players; in grassroots youth football, analysis should inform coaching rather than critique individual players one-to-one.
• Use a visible marker, such as a wristband, for children whose parents have refused consent, so photographers know not to take close-ups.
• Store footage in a protected folder with restricted access, not on unencrypted phones, laptops or memory sticks, and keep it only as long as needed.
• No photography or filming in changing rooms, showers or toilets.
• For live streaming of grassroots matches: tell teams in advance, use wide-angle views, restrict access to people with a legitimate interest such as parents, and switch off or monitor chat.

What AI changes: tracking, identification and suppliers

AI analysis turns a recording into structured data about each child: positions over time, actions, sometimes physical estimates. That is more processing than simply storing a video, and it raises specific questions.

The ICO's guidance on AI and data protection states that a data protection impact assessment (DPIA) is required in most cases where AI systems process personal data. For a club, a DPIA can be a few pages: what is processed, why, the risks to children and the measures taken. The ICO notes this guidance is under review after the 2025 Act, so check the current version.

Before turning to AI, it pays to automate repetitive work that involves no sensitive data, such as a tournament schedule. The DorsalCUP tournament fixture generator is free, needs no sign-up and stores nothing on a server.

The EU AI Act: when it applies and what it covers

The EU AI Act (Regulation (EU) 2024/1689) entered into force in August 2024 and applies in stages. UK clubs are not directly bound by it for domestic activity, but it can apply to UK organisations whose AI systems or outputs are used in the EU, and it shapes the products that suppliers sell across Europe.

• Prohibited practices (since 2 February 2025) include AI that infers emotions in workplaces and educational institutions, biometric categorisation to infer sensitive characteristics, and AI that exploits vulnerabilities due to age in harmful ways.
• From 2 December 2026, a further prohibition covers AI that generates child sexual abuse material or non-consensual intimate images of identifiable people.
• High-risk systems (Annex III) include certain biometric, education and employment uses; after the 2026 amendments, these obligations apply from 2 December 2027.
• Most club uses (auto-clipping, event tagging, tactical analysis) are unlikely to be high-risk, but data protection law applies to them in full.

In practice, for a UK grassroots club the binding rules remain UK GDPR, the DPA 2018 and FA safeguarding guidance. The AI Act matters mainly when choosing suppliers and when the club operates in or travels to EU competitions.

A checklist for clubs that film youth football

1. Decide the purposes: coaching, streaming to families, publicity. Each needs its own justification.
2. Choose and record the lawful basis for each purpose; use written parental consent for publication.
3. Publish a privacy notice for parents and players before the season; include the AI platform if used.
4. Offer an opt-out and record it; use the FA's visible-marker approach on match days.
5. Inform the opposition before filming; agree streaming in advance.
6. Run a short DPIA if footage goes into an AI analysis platform.
7. Check supplier terms: storage location, access, retention, model training, deletion on request.
8. Restrict access to named accounts; no public links; no clips in open group chats.
9. Set a retention period and diarise deletion.
10. Name one person responsible, usually alongside the club welfare officer.

For how to use the footage once it is collected properly, see AI video analysis for grassroots football, and for the wider picture on touchline behaviour, parents on the touchline.

Frequently asked questions