What image EXIF metadata reveals about copyright ownership

Image files often carry embedded metadata that names the original photographer, the distributing agency, and the applicable license terms. This metadata is one of the fastest signals to check when you want to know whether an image on your website came from a licensed channel or was added without authorization. EXIF, IPTC, and XMP are the three main metadata formats embedded in image files, and each can contain copyright ownership information, although editing tools, CMSs, CDNs and social platforms often strip it.

What EXIF data is and what it contains

EXIF stands for Exchangeable Image File Format. It is a standard for embedding technical and descriptive data in image files, most commonly JPEG and TIFF. EXIF was designed to store camera settings: shutter speed, aperture, ISO, focal length, GPS coordinates, and capture date. These fields are written automatically by the camera at the moment of capture.

Copyright-relevant EXIF fields include:

• Artist: The name of the person who created the image
• Copyright: A copyright notice string, often in the format "Copyright 2024 Jane Photographer" or "Getty Images"
• ImageDescription: A free-text description field that photographers and agencies sometimes use for rights information

EXIF copyright fields are useful when populated, but they are not always present and are not always accurate. Anyone can edit EXIF data with free tools, including stripping or replacing fields. The absence of EXIF data does not mean an image is in the public domain.

IPTC metadata: the dedicated rights standard

IPTC (International Press Telecommunications Council) metadata is a richer standard developed specifically to communicate ownership and licensing information. News agencies, commercial photographers, and stock libraries use IPTC fields to establish provenance and define permitted use when distributing images to clients and publications.

Key IPTC copyright fields:

• Creator (By-line): The photographer's name
• Credit Line: The agency or publication to credit
• Copyright Notice: A human-readable copyright statement such as "Copyright 2024 Smith Photography. All rights reserved."
• Rights Usage Terms: Instructions for permitted use (for example, "Editorial use only" or "License required for commercial use")
• Source: The original supplier of the image, often a stock agency name
• License URL: A URL pointing to the applicable license terms

When a Getty Images or Shutterstock photo is exported from the agency's platform, it typically carries IPTC data identifying the agency, the photographer, and a copyright notice. If you find a Getty Images or Shutterstock credit in the IPTC data of an image currently on your website, that is a strong indicator that the image required an agency license to use. The presence of that metadata does not prove infringement by itself, but it is a strong reason to find your license before you rely on the image.

XMP metadata: the modern standard for editing workflows

XMP (Extensible Metadata Platform) was developed by Adobe and is embedded in image files as a block of XML. Most modern editing software, including Adobe Photoshop, Lightroom, and Bridge, writes XMP metadata in addition to or instead of IPTC. XMP uses standardized schemas from Dublin Core and the IPTC extension to store rights information.

XMP fields that correspond to rights information:

• dc:creator: Creator name
• dc:rights: Copyright statement
• xmpRights:UsageTerms: Human-readable license terms
• xmpRights:WebStatement: A URL pointing to the license or rights declaration
• photoshop:Credit: Credit line

Images that passed through Adobe products often carry XMP rights fields even if the original IPTC data was not populated by the stock agency. If a freelance photographer edited a licensed stock photo in Lightroom before passing it to a client, the XMP may reveal the image's origin through the agency's copyright string, even if the photographer did not realize the metadata was present.

Why metadata alone is not sufficient for copyright detection

Metadata can be stripped or altered. Social media platforms commonly strip some or all embedded metadata when images are uploaded: in the IPTC's 2019 test of social sites, Instagram, Facebook and Twitter (now X) displayed none of it, and Facebook kept only a few rights fields in the files it served. An image downloaded from Instagram will usually contain little or no embedded metadata, but that absence tells you nothing about its copyright status: the copyright exists independently of whether the metadata is present.

Conversely, metadata can be fabricated. An image with "CC0 No Rights Reserved" in its IPTC Copyright field could still be a licensed Getty photo with false metadata added to obscure its origin. Metadata is evidence, not proof.

This is why professional copyright enforcement systems do not rely solely on metadata. Getty Images operates PicScout, a system that uses perceptual hashing to detect licensed images across the web. A perceptual hash is a compact digital fingerprint of an image's visual content, designed so that similar images produce similar hashes even after resizing, cropping, recompression, or moderate color adjustment. Stripping metadata from a stock photo does not change its perceptual hash and does not protect you from detection.

How to read image metadata yourself

Windows (no additional tools required): Right-click the image file, select Properties, then go to the Details tab. You will see basic EXIF fields including copyright, camera make and model, capture date, GPS data, and a copyright notice if one was embedded.

ExifTool (free, cross-platform): ExifTool is a command-line application that reads all EXIF, IPTC, and XMP fields from any image and outputs them in a structured list. Running exiftool filename.jpg shows every embedded field including rights, credit, and source. ExifTool is particularly useful for batch-checking a folder of images.

Browser inspection: If you right-click an image on a webpage and select "Open image in new tab," the resulting URL sometimes contains agency codes or image IDs embedded in the filename or path (for example, a Getty image ID in the URL). This is not metadata inspection per se, but file naming conventions in stock agency download files often identify the source.

Online metadata viewers: Several free web tools accept an image upload and display its embedded metadata, including PixGuard's free metadata viewer, which shows EXIF, IPTC and XMP fields without signup. These are convenient for occasional checks without installing software.

Metadata signals that PixGuard reads

With a free PixGuard account, website scans read the EXIF, IPTC and XMP copyright fields of the images they find as one of several risk signals. When an image carries a copyright notice, a creator or artist field, or IPTC copyright information (often naming a photographer or stock agency), PixGuard flags that image for review alongside its other findings. (The no-signup check, which looks at the 3 largest images on one page, does not read metadata; it looks for watermark patterns and other visual risk signals.)

Metadata signals are weighed alongside other indicators: watermark text and logos from major stock agencies, tiled watermark patterns, matches against a database of reference image fingerprints, and an AI-generation estimate. On Pro and Business, source lookup also shows web pages where a matching image appears. The combination produces a 0 to 100 risk score that helps you prioritize which images to investigate first. For a single file, the free watermark detector checks an upload for visible watermark text and logos, and flags unusual pixel patterns that can indicate hidden marks (a flag there is not proof of a watermark).

Metadata and AI-generated images

AI image generation tools (Midjourney, DALL-E, Stable Diffusion, Adobe Firefly) do not embed consistent or reliable copyright metadata in their output files. Some tools, Adobe Firefly for example, attach a C2PA Content Credentials record (a signed provenance record describing how the file was made) that says the image was AI-generated, but that record is often lost when the file is re-saved, edited, or uploaded to a platform that strips metadata. The absence of metadata in an AI-generated image is expected and does not confirm or deny any copyright status.

Do not assume an AI-generated image is invisible to enforcement. Stock libraries such as Adobe Stock also license AI-generated images, and an AI output that closely reproduces an existing photo or artwork can still match it. The terms of the specific AI tool you used also govern whether you can use the image commercially, and those terms vary significantly across platforms.

To judge whether an image on your site was generated by an AI tool (including AI images passed off as real photography), see our guide on how to spot AI-generated images. PixGuard account scans also include an AI-generation estimate for each image.

What to do when metadata reveals a stock agency origin

If you find stock agency metadata in an image on your site and you do not have a documented license from that agency:

1. Remove the image from your site immediately to stop ongoing use.
2. Search your email for a purchase confirmation or subscription invoice from the agency that would cover that image.
3. If you cannot find a license, replace the image with a properly licensed alternative.
4. If the image was provided by a contractor or supplier, contact them in writing and ask them to provide documentation of the license they held for that image.
5. Keep records of when you removed the image, in case a demand letter arrives later.

For more guidance on tracing image ownership when the original source is unclear, see how to find who owns an image.

Frequently Asked Questions

Can I remove EXIF data to avoid copyright claims? Removing EXIF or IPTC data does not remove the copyright from the image. It also does not protect you from detection systems like Getty's PicScout, which identify images by visual fingerprint rather than metadata. Removing metadata from an image you did not license is not a legal defense. In the US, intentionally removing copyright information such as a creator or copyright field, knowing it will help enable or conceal infringement, can also violate 17 U.S.C. 1202(b).

Do all images have EXIF or IPTC metadata? No. Screenshots, images created in design tools, images processed through social media platforms, and many AI-generated images have no embedded metadata. The absence of metadata does not mean the image is public domain or free to use.

Can I trust a "Creative Commons" claim embedded in image metadata? Not without verification. Metadata can be added or modified by anyone. To confirm a CC license claim, trace the image back to its original source (Wikimedia Commons, the photographer's Flickr page, etc.) and verify the license at the source. If you cannot verify the source, treat the metadata as unconfirmed and find an image you can verify.

What if a photographer removed their copyright metadata before sending me an image? The copyright exists regardless of whether the metadata is present. A photographer who sends you an image with all metadata stripped still owns the copyright in that image. The absence of metadata does not transfer rights to you. You need a license or permission that covers your use, and it's best to get it in writing so you can prove it. If you want to own the copyright, you need a signed assignment; in the US, a freelancer's photo is rarely a work made for hire (17 U.S.C. 101).

What is a perceptual hash and why does it matter for copyright enforcement? A perceptual hash is a mathematical fingerprint of an image's visual content, designed to remain stable across common modifications like resizing, cropping, compression, and moderate color changes. Stock agencies use perceptual hashing to scan the web for unauthorized uses of their images without relying on metadata. Even an image with all metadata stripped and some visual changes may still match its original perceptual hash in the agency's database.

---

To check the metadata of the images a scan finds on your site, rather than one file at a time, create a free account: 30 image scans, valid for 30 days, no credit card required.