For most education and training uses, anonymised information will be sufficient and must be used whenever practicable. If it is necessary to use identifiable information about a patient, or it is not practicable to anonymise information, you should usually ask for the patient’s explicit consent before disclosing it to anyone who is not part of the team that is providing or supporting the patient’s direct care. You should make sure that the patient is under no pressure to consent. In particular, you should avoid any impression that their care depends on giving consent.
The General Medical Council (GMC) provides ethical guidance on making and using visual and audio recordings of patients.
The Royal College of Radiologists (RCR) has also produced guidance on the use of patient images obtained as part of standard care for teaching, although please note that this is tailored to radiology and also discusses use for training and research.
Their video provides an overview:
In sum, you can “use photographic or radiological images of patients created in your place of work as long as they are fully anonymised and patients are not identifiable from the images or any data files attached. This means not only removing their name and date of birth from the actual image, but also any identifiers such as NHS/ hospital number, hospital name, doctors name, etc. from any metadata file attached” (Source: RCR).