Abstract: Disclosed herein is a device for capturing data relating to a person. The device includes a memory for storing instructions for executing a program and a processing system configured to execute the instructions. When the processing system executes the instructions the processing system is configured to record consent from a person to capture and/or transmit the data. In the event that consent has been recorded, the processor enables the data to be captured and/or transmitted. Also disclosed in a device that receives a first indication that the person has given their consent, the first indication being received in the form of biometric data; and receives a second indication that the person has given their consent. The device records both the first indication and the second indication of the consent. Also disclosed is a method controlling access to a digital image of a subject, a servicing system for handling data, and processor-executable instructions for configuring a device in accordance with the disclosure.