Copyright and Fair Use in UGC Repurposing: Practical Framework
Customers keep the copyright in their posts, and fair-use exceptions are narrower than most brands assume. Covers music, right of publicity and DMCA takedowns.
The fair-use argument the in-house team had quietly leaned on for two years did not survive the first letter from the creator's lawyer. Nine paragraphs, and the opening four cited cases the brand team did not know existed. This framework is what we built with our own counsel once that letter landed.
When a customer uploads a photo or video to social media, they retain copyright in that work. A brand that reposts it without a licence is committing infringement, even if the post features the brand's product or was tagged with the brand's hashtag. Fair-use exceptions are narrower than most marketers assume, and they almost never apply to commercial display.
In this article
Who owns UGC by default
Copyright ownership defaults to the creator. Posting on Instagram, TikTok, or anywhere else does not transfer copyright to the platform or to brands the post mentions. The customer retains all rights and can license, sell, or refuse to license that work. Tagging a brand grants the brand zero usage rights.
What's the difference between a licence and ownership?
What brands actually need is a licence: permission to use the work for specified purposes, for a specified duration. The licence does not transfer ownership, the creator still owns the work and can revoke (with notice). Most rights collection workflows produce a licence, not an ownership transfer. The template language in how to get UGC rights reflects this.
What does fair use actually cover? Scope and limits
Fair use in the US allows limited use without licence for purposes like criticism, comment, news reporting, teaching, scholarship, or research. Commercial product marketing does not qualify under any of these. The "transformative use" doctrine occasionally cited by brands rarely succeeds in court for marketing display. Do not rely on fair use for commercial UGC display.
Can you use the music in customer videos?
A customer video featuring copyrighted music has two copyright layers: the customer's rights in the video, and the music label's rights in the soundtrack. Even with the customer's permission to repost the video, the brand does not have rights to the music. Most platforms have automated music-detection that flags this, but the legal exposure remains the brand's.
Right-of-publicity overlap
Beyond copyright, individuals have a "right of publicity", control over the commercial use of their likeness. This is separate from copyright. A brand reposting a customer photo needs both a copyright licence (for the work) and a right-of-publicity release (for the customer's likeness). Most consolidated rights workflows cover both; verify yours does.
Practical safe-harbour workflow
Five-step workflow: (1) request explicit licence from the creator before any use, (2) capture the licence in a timestamped, retrievable record, (3) verify music rights separately if the content includes copyrighted audio, (4) preserve FTC disclosure if the original post was sponsored, (5) maintain takedown SLAs if licence is later revoked. See what is UGC rights management for the operational backbone.
DMCA and platform takedowns
If a creator submits a DMCA takedown notice for content you're displaying, you have 24–72 hours to remove it (jurisdiction-dependent) to maintain safe harbour. Beyond that window, you're exposed to direct infringement claims. Build a fast-removal SLA into operations; don't treat takedowns as low-priority tickets.
Copyright in UGC is not a theoretical risk. Several seven-figure settlements have established that "we just reposted it" is not a defence. The frameworks above are what separate a defensible programme from one a single determined creator with a competent IP lawyer can unwind.
0 days
GDPR right-to-erasure SLA
End-to-end inc. CDN purges
0 days
CCPA deletion SLA
CPRA
0%
of brands fail withdrawal SLA on audit
Idukki research Q1 2026
0%
Median rights yes-rate
Idukki dataset
Sources & notes
- 1GDPR full text · Articles 6 (lawful basis), 7 (consent), 17 (right to erasure), 28 (processor obligations), 46 (transfers).
- 2FTC Endorsement Guides · Material connection must be disclosed clearly and conspicuously. Brand is liable for endorser disclosure failures.
- 3Bazaarvoice, 2025 Shopper Experience Index · +144% conversion / +162% RPV among UGC-engagers; +354% conversion on PDPs with reviews vs without.
Continue reading
3 pieces in this clusterThese long-form pieces on the Idukki blog link back to this article, go deeper on the cluster.
- Strategy
How to Get Rights to Repost Customer UGC (with Templates that Average 38% Yes-Rate)
DM, comment and email templates with response rates of 24-41%, the 24-hour ask window, one-tap consent links and audit trails. Built from 60,000+ rights requests.
- Strategy
GDPR, consent and UGC
UGC shows identifiable people, so it is personal data under GDPR. A defensible programme records scoped permission, honours removal requests, and minimises what it holds.
- Strategy
What Is UGC Rights Management? Legal Framework
UGC rights management is obtaining explicit, documented permission before reposting customer content. Manual workflows collapse past about 50 pieces a month.
More from Rohin Aggarwal
- Strategy
PDP before and after UGC: what actually changes on the page
Add verified customer photos, video and reviews to the middle scroll of a brand-only PDP and conversion lifts. Here is what moves, scroll by scroll.
- Strategy
A kitchen table in Egham, why I built Idukki
Day job: SAP architect on UK government software. Night job: founder of a UGC platform. The Venn diagram of those two communities is roughly one person.
- Strategy
The Death of Impression-Based Pricing: A Finance Director's Case
Impression-based pricing made sense while impressions tracked funnel impact. They stopped. A finance director's argument for outcome-based commercial models in the agentic era.