Most parents don’t think of photographing their children as a decision with long-term legal implications. But a child born today will grow up with a digital record created by other people — parents, grandparents, aunts, family friends — who each made individual decisions about what to post, where, and for how long. By some estimates, children have thousands of photos of themselves online before they’re old enough to form their own opinion about whether they want any of them there.
The legal and cultural frameworks governing what adults can post about children are shifting. New legislation, new interpretations of existing privacy rights, and changing expectations among teenagers and young adults are combining to create a landscape where parents’ documentation practices — including where they store family memories — carry more consequences than they once did.
What California SB 1247 Actually Says
In early 2026, California passed SB 1247, legislation directed specifically at child influencer content. The law allows individuals who appeared in paid content as minors — think family YouTube channels, sponsored social media posts, lifestyle content that generated revenue — to request that the content be deleted or edited once they turn 18.
Under the law, parents or guardians are given 10 days to comply with a removal request, or face fines of $3,000 per day in violation and civil liability. The law creates a private right of action, meaning the now-adult child can sue to enforce their request.
The practical scope is more specific than it might sound: SB 1247 targets paid content. Not every photo of a child on a parent’s social media account triggers these requirements — the law is aimed at commercial exploitation, where a child’s image was used to generate revenue that the child didn’t control or consent to. But it marks a significant legal moment: the first time a US state has given now-adult former child subjects a specific legal mechanism to demand removal of content about their own lives.
The Broader Right to Be Forgotten for Minors
Beyond SB 1247’s commercial content focus, the broader “right to be forgotten” — the right to request erasure of personal information — has increasingly been applied to minors in European law.
The GDPR’s Article 17 codifies the right to erasure. For children, this provision has particular weight: children cannot fully consent to data processing, which means data collected about them without proper legal basis is more vulnerable to erasure claims. EU data protection authorities have consistently applied a heightened standard to children’s data.
Several European countries have also seen cases where parents posted information about their children — sometimes beginning in infancy — who later, as teenagers, demanded that the content be removed. Courts have generally found in favor of the children when the parents’ social media accounts were public and the children could articulate genuine objection to the ongoing exposure.
This is not a purely hypothetical future scenario. Teenagers are already asserting these rights. The legal frameworks supporting them are already in place in Europe, and are beginning to develop in the United States.
The Difference Between Public Posting and Private Storage
Most coverage of sharenting focuses on what parents post publicly — Instagram, Facebook, YouTube, family blogs. But there’s a meaningful distinction between where content is stored and where it’s shared, and it matters for both privacy and the practical exposure these legal frameworks create.
Content shared publicly on social platforms is what SB 1247, European right-to-be-forgotten cases, and media coverage primarily address. These are posts where the child’s image, name, or personal details were made broadly accessible. The legal and reputational risks concentrate here.
Content stored privately in cloud photo libraries is a different situation. A family photo library in Google Photos, iCloud, or a private cloud storage service — where photos are not publicly shared and access is limited to family members — is not what sharenting advocates or new legislation are primarily targeting. Private storage of family memories is a different activity from public publication of them.
This distinction matters for parents thinking about how to document their family’s life. The risks associated with sharenting — digital permanence, loss of child consent, commercial exploitation, future embarrassment — are primarily risks that arise from public sharing. The same photos stored privately, accessible only to family, present a fundamentally different profile.
That said, private cloud storage isn’t uniformly private. The provider has access in many cases. Shared albums can expand access beyond what was initially intended. Third-party app integrations can reach photo libraries without parents fully understanding the permission scope. The line between “private storage” and “shared with various platforms and partners” is blurrier in practice than the initial setup suggests.
What This Means for How Parents Store Family Photos
The combination of new legislation, changing social norms, and children’s growing awareness of their own digital presence points toward a practical set of considerations for parents:
Distinguish between storing and sharing. Keeping a comprehensive family photo archive — for your own memories, for sharing within the family — is different from posting publicly. Treating these as separate activities, with separate tools, reduces the risk that a “just for family” photo ends up with wider distribution than you intended.
Use platforms that don’t monetize content. Platforms that run on advertising revenue — or where your content can be used for AI training, feature development, or other platform purposes — create interests in your photos beyond your own. A photo stored on an ad-supported platform has multiple parties with potential interests in it. A photo stored on a service that doesn’t advertise, doesn’t sell data, and doesn’t train AI on content has essentially one party with access: you.
Be thoughtful about what goes into shared albums. Shared family albums on major platforms are convenient but expand the access profile. When a grandparent saves a photo from a shared album to their own account, it creates another copy in another service’s infrastructure, potentially with different privacy policies and data practices. Private storage that you control, rather than platform-mediated sharing, keeps the access profile tighter.
Talk with your children about what you store. The legal frameworks are a trailing indicator of a social shift that’s already underway. Teenagers and young adults are already talking about their own digital footprints, often with more sophistication than their parents expect. Treating family documentation as something children have some voice in — not just a subject that’s photographed and filed — builds the relationship that makes erasure claims less likely to become necessary.
Consider what you post vs. what you store. The specific risk that SB 1247 and European right-to-be-forgotten cases address is public posting, not private storage. If you’re primarily concerned about the legal landscape, the cleaner answer is: don’t post publicly without your child’s meaningful input; do keep whatever family archive you choose in a private storage environment rather than publicly.
The Parent’s Archive as Distinct from the Public Record
There’s a genuine tension in all of this between two things that both seem reasonable: parents’ desire to document their family’s life comprehensively, and children’s emerging interest in having some control over the digital record of their own early years.
These don’t have to be in conflict. A comprehensive private archive — stored with care, accessible to family, not distributed to platforms with interests in the content — can be both a rich documentation of family history and a more respectful approach to the children who appear in it. The photos don’t need to be public to be meaningful. The memories don’t require platform distribution to be preserved.
The emerging legal frameworks are mostly aimed at the cases where these two things did come into conflict: where parents’ sharing behavior produced a public record that a now-adult child finds harmful and wants removed. A parent who kept family memories private and shared selectively, with attention to what the children themselves might someday think of the record, is unlikely to face the outcomes these laws are designed to remedy.
The legislation is, in that sense, a prompt to ask a question that was always worth asking: who is this archive for, where does it live, and who has access to it? The answer “it’s for us, it lives in a service we control, and access is limited to family” is a different starting position than “it’s wherever we uploaded it, shared broadly to family and friends through whatever platform was convenient.”
The technology for the first answer — private, controlled, access-limited family archives — has always existed. The legal and social pressure to use it is increasing.
Store your family’s memories privately, without advertising or third-party data use