Images and videos are protected under GDPR if they identify an individual, directly or indirectly.
This means that, if images and videos of individuals are collected and processed by an organisation, they have a legal obligation to keep them safe and secure. This includes photographs, CCTV footage, and any other visual images.
If an organisation fails to do so and your images are breached, it can have serious consequences.
For example, images and videos that are published or shared without your consent, could lead to embarrassment, reputational damage, or invasion of privacy. What’s more, if personal identification details are associated with the breached images or videos, malicious actors could exploit this information for identity theft or fraudulent purposes.
KP Law is a group action law firm. With a group action claim, you and the other victims join together and fight to get compensation. Group actions can be a powerful tool and can have a bigger impact than a single claim.
If you are a victim of a data protection failure involving your image, check out our current group actions to see if we are running a claim related to that specific breach.
If you are involved in a potential group action not listed below, please contact us and tell us about it! Where enough people come forward, we may launch a new claim.
We do not take on individual cases.
Intimate image abuse, otherwise known as ‘revenge porn’, occurs when a spurned partner takes revenge by posting intimate sexual images and videos online. In some cases, it is almost impossible for victims to completely erase their private photos and videos from the Internet, even if removed from the site where they were initially shared.
Revenge porn is illegal in England and Wales and is punishable by up to two years in prison. Despite this, thousands of revenge porn pictures and videos are still freely shared online.
Our data protection experts have identified an unused weapon in the legal armoury against image-based sexual abuse. Under the UK GDPR, photographs and videos can constitute personal data. As such, any sites that share this personal data must have consent from all parties.
This is clearly not happening, and we believe that there should be consequences for those businesses that enable intimate image abuse. As such, we make GDPR claims against the platforms profiting from this crime.
As well as fast-tracking an individual’s legal ‘Right to be Forgotten’ – which will force platforms to remove illegally shared intimate images – we are also seeking financial damages for the emotional and reputational damage suffered by victims.
Don’t let the fear of costs stop you getting the justice you deserve. Contact us today and let us fight for you.
While each case is judged on its own merits, there are some things we would typically look for when it comes to when claiming compensation following a data breach, cybercrime or other GDPR violation:
With stolen data, cybercriminals can make purchases using your bank and credit cards, apply for credit in your name, set up fraudulent bank accounts and access your existing online accounts.
GDPR failures, cybercrime and data breaches can have a significant impact on you, both mentally and physically. They can cause or exacerbate anxiety, stress and other psychological conditions.
Your data has value, and organisations must be held to account if they fail to protect your right to data privacy or otherwise do not uphold your GDPR rights.
We use legal technology where it adds value. Our team deploys advanced tools to streamline complex processes, reduce costs and improve case strategy.
We explain your position in plain English. We’ll work with you side-by-side and keep you informed every step of the way.
We understand the pressures of running a business and tailor our advice to your commercial objectives and budget.
Our litigators have successfully resolved disputes in the High Court, County Court, and through alternative dispute resolution in high profile and high value cases.
From early case assessment to managing high-volume data in document-heavy disputes, we use a developed operations team and technology to make litigation more efficient, transparent and effective.
Our legal team have litigated in high profile cases in the UK and USA, securing results for tens of thousands of clients in the UK and abroad.

Over the past year, KP Law has continued to grow its team, develop its technology and strengthen its expertise as we continue to achieve the best possible outcomes for all our clients.
This success has been recognised in the 2027 edition of the Legal 500, with KP Law maintaining its Tier 1 ranking for Group Litigation.
The Legal 500’s commentary celebrates the firm’s work on complex, high-value group litigation and identifies the breadth of its practice, including product liability, data breach and equal pay claims. It also highlights the strong contribution of the wider team across the firm’s ongoing matters and recognises KP Law’s status as a leader in its field.
Three KP Law lawyers also receive individual recognition in the directory. Managing Partner Andrew Nugent Smith and Partner and Head of Product Liability Tom Longstaff are listed as Leading Individuals. Senior Associate Carter Young retains her status as a Leading Associate.

This development comes despite Harrods previously stating that it accepted vicarious liability for the ‘despicable sexual abuse’ suffered by hundreds of survivors.This latest disclosure, on the day of the second anniversary of the documentary that highlighted the scale of the abuse by Fayed and his team of enablers, follows the

Disclosure of the true value comes as Harrods reports that its much criticised Redress Scheme only paid a total of £4.1m in compensation to just over 50 survivors in the year up to January 2026 and has only set aside £51.8m for all future claims. KP Law, which is representing
CORLA was founded by a group of law firms that are deeply committed to improving access to justice for claimants by way of collective redress.
We are a founding member of CORLA, alongside Edwin Coe, Hausfeld, Leigh Day, Milberg London and PGMBM.