PiiBlur

Every photo tells a story. Many of those stories contain personal data you never meant to share. A face in the background of a real estate listing, a license plate in dashcam footage, a credit card on a desk in a product shot — all qualify as personally identifiable information (PII).

If your business captures, stores, or publishes images, you need to know what visual PII looks like and how to handle it.

What counts as PII in images?

PII in images is any visual element that identifies a specific person, directly or in combination with other data. A face is the most obvious example, but PII extends far beyond faces. A license plate links to a vehicle registration. A name badge ties to an employer. A QR code can encode personal URLs, contact details, or account numbers.

Privacy regulations like GDPR and CCPA treat all of these as personal data. If someone can be identified from an image — even indirectly — you have a compliance obligation.

The 13 categories of visual PII

PiiBlur detects 13 categories of PII in photos and videos. Here is what each one looks like in practice and why it matters.

Faces and heads

The most recognizable form of visual PII. Any image containing a face can identify a person — whether security footage, street-level photography, event photos, or property listings.

License plates

A license plate links directly to a registered owner through public and law enforcement databases. Dashcam footage, parking lot imagery, and street-level photography capture plates constantly.

Screens

Monitors, phones, and tablets in frame often display emails, messages, account dashboards, or personal documents. A single visible screen can expose names, addresses, and financial data.

Documents and writing

Printed or handwritten text in images — mail on a counter, a whiteboard in an office tour, notes on a desk — can reveal names, addresses, account numbers, and other sensitive details.

Street signs

Street signs establish location. Combined with other clues in an image, they can pinpoint where a person lives or works. This matters most for real estate photography and surveillance footage.

ID cards

Government-issued identification cards contain names, photos, dates of birth, and ID numbers. A single visible ID card in an image exposes enough data for identity theft.

Passports

Passports contain nationality, full legal name, date of birth, and a machine-readable zone. Even a partial passport image reveals sensitive personal data.

Credit cards

Visible card numbers, expiration dates, and cardholder names create immediate financial risk. Credit cards appear in images more often than expected — on desks, in wallets, held up in video calls.

Name badges

Conference photos, office tours, and event coverage routinely capture name badges. These reveal a person's full name, employer, and sometimes role or department.

QR codes

QR codes encode data invisible to the human eye but readable by machines. They can contain URLs, personal contact information, payment details, or links to private accounts.

Barcodes

Like QR codes, barcodes on packages, tickets, and ID cards can encode personal or trackable information. Shipping labels are a common source.

Tattoos

Distinctive tattoos can identify a person even when their face is obscured. Law enforcement databases index tattoos, and social media makes tattoo-based identification increasingly feasible.

Why visual PII matters for your business

The risks fall into three areas:

Regulatory exposure. GDPR, CCPA, and other privacy laws classify images containing identifiable information as personal data. Processing these images without proper safeguards triggers fines and enforcement actions.

Reputational damage. Publishing images that expose someone's face, plate, or personal documents erodes trust with your customers, your partners, and the public.

Operational liability. Once an image is published or shared, you cannot retract the data it contains. Redaction after the fact is damage control, not prevention.

How to protect visual PII in images

Automated detection and redaction before images reach their destination is the most reliable method. Manual review does not scale, and human reviewers miss things — especially less obvious categories like QR codes, barcodes, and screens.

PiiBlur's API and dashboard detect all 13 PII categories listed above. You can blur or pixelate any detected region, process images and videos in bulk, and integrate redaction directly into your workflow.

Whether you manage real estate listings, operate surveillance systems, or handle any other image-heavy workflow, automated PII detection removes the guesswork.

The free tier includes 100 images and 5 minutes of video per month. Paid plans start at $49/month for higher volumes. See pricing for details.