Using staff's or students' photos on WebPages or in journals is equivalent to disclosing them to the public. According to the Personal Data Protection Act, such actions are personal data processing, and should be explained to the data subject as to their purposes, and be conducted with the latter's consent. Institutions should also alert the data subject to the fact that putting their personal data on the internet may mean exposure to insecurity, as data on the net may be downloaded or accessed via other links, and therefore must be handled with care.