AI is changing the risk around public images and information

Most organisations publish content online.

This may include team photos, event images, case studies, testimonials, client logos, staff profiles, training photos, office images or social media posts.

Until recently, many organisations thought of this mainly as a marketing issue.

Now it is also an AI risk issue.

A recent UK report warned that schools should review or remove identifiable pupil photos because criminals may misuse public images with AI tools.

Although the report focuses on schools, the wider principle matters for businesses too.

If information is public, AI tools may be able to copy, alter, combine or repurpose it.

That means organisations need to think more carefully about what they publish and why.

The risk is not only the image – it is the context around it

A single photo may not seem sensitive.

But risk increases when it is combined with other information.

For example:

• A person’s full name
• Their job title
• Their workplace
• Their location
• Their email format
• Their social media profile
• Their event attendance
• Their role in a project
• A client relationship
• A quote or testimonial

AI tools can make it easier to connect information from different places.

That can create risks around impersonation, fraud, harassment, unwanted profiling, reputational harm or misuse of images.

The ICO’s AI guidance highlights the importance of data protection, risk assessment and governance where organisations use AI or process information in AI-related contexts.

For SMEs, this does not mean removing every photo from the website.

It means being more deliberate.

Businesses should know what public information they hold, why it is online, whether consent is current, and whether the content still needs to be public.

What businesses should do now

A practical public content review can be simple but valuable.

Businesses should check:

• Which staff photos are published online
• Whether names and roles are necessary
• Whether old event images should be removed
• Whether consent is documented and still valid
• Whether clients or partners appear in public content
• Whether vulnerable people, learners or service users are identifiable
• Whether social media posting rules are clear
• Who approves website and social media content
• What should be removed when a person leaves the organisation
• Whether AI risks are covered in internal policies

This should form part of wider AI governance.

CAIT Group Ltd helps organisations review AI-related risks, create practical policies, train management teams and improve staff understanding of responsible AI use.

The aim is not to stop businesses being visible online.

The aim is to make online visibility safer, clearer and better controlled.

Practical impact by organisation type

Individuals: People are better protected when organisations think carefully before publishing names, images and personal details.

Small businesses: A simple public content review can reduce avoidable risks without stopping marketing activity.

Medium businesses: Clear rules help departments avoid inconsistent posting across websites, LinkedIn, events and social media.

Large businesses: Stronger governance supports brand protection, staff safety, data protection and reputational risk management.

Multinationals: Public content policies help maintain consistent standards across regions, teams and campaigns.

Public sector organisations: Extra care is needed where content involves children, vulnerable people, service users, citizens or sensitive services.

CAIT service connection

This story connects directly to CAIT Group Ltd’s services:

• AI governance and policy readiness
• AI risk readiness
• Data protection-aware AI adoption
• Staff AI usage guidance
• Public content and online information review
• Management team AI training
• Leadership decision-making support
• Shadow AI and information exposure review

CAIT helps organisations understand how AI changes risk, then create practical rules that protect people, information and reputation.

Could your public website or social media content create AI-related risk?

We can help you review what is online, identify avoidable exposure and create clearer rules for safer AI-aware publishing.