Safety Norms: Brand Identity and Graphic Design

1Purpose, scope, and safety principles

These norms apply to anyone who creates, reviews, approves, or publishes brand identity work. That includes students, freelance and employed designers, agency teams, print vendors, and clients who supply content or approve final files. The goal is to prevent harm to people who view or use brand materials, to people depicted in them, to the creators who produce them, and to the organizations that rely on them.

Three principles guide every rule. Harm prevention comes before speed. Every image, font, claim, and mark must be traceable to a lawful source. Any ambiguity is escalated to a qualified reviewer rather than guessed. In this document, mandatory means the rule must be followed unless a qualified reviewer records a documented exception. Recommended means good practice that teams should adopt unless a written reason supports a different choice.

• Mandatory: no brand asset is published without documented rights clearance and a named approver.
• Recommended: run accessibility and color contrast checks on every release candidate.

2Roles, competence, and accountability

The brand lead or project owner is accountable for the final brand package, including its rights records, claims, and approvals. Designers are responsible for their source files, license evidence, accessibility checks, and for flagging anything they cannot verify. Copy reviewers check factual statements against evidence. Legal or compliance reviewers, where the organization has them, approve trademark use, regulated claims, and privacy-sensitive content. Clients are responsible for supplying accurate product information and written permission for any third-party material they provide.

Work involving health, food, financial products, children, political messaging, or safety-critical information requires review by people with appropriate professional authorization. Designers do not give legal opinions on trademarks, licensing, or regulated claims.

• Mandatory: name one accountable owner for each brand asset in the project file.
• Mandatory: designers escalate trademark, licensing, and regulated-claim questions to qualified reviewers.
• Recommended: complete a refresher on privacy, accessibility, and advertising standards before leading a client-facing project.

3Activities, hazards, and risk assessment

Typical activities include concept research, moodboard creation, font selection, logo sketching, vector production, photo sourcing, color testing, print proofing, packaging dielines, web and app interface design, motion graphics, and social media templates. Hazards fall into several groups. Audience harms include misleading claims, unreadable text, and unsafe or confusing instructions. Harms to depicted people include unconsented likeness, stereotyping, and exposure of minors. Legal harms include copyright infringement, trademark conflict, and unlicensed fonts. Privacy harms include real personal data appearing in mockups or test data. Workspace harms include eye strain, repetitive strain, and exposure to inks, adhesives, and solvents in print areas.

Each deliverable should be rated low, medium, or high risk. High risk includes health, child-directed, financial, political, or safety-critical materials, any use of identifiable people, and anything carrying a regulated or performance claim. High-risk work needs documented review before release.

• Mandatory: record a risk rating in the project brief before production starts.
• Mandatory: high-risk assets require a second reviewer who did not produce them.
• Recommended: reassess risk when scope changes, such as a new channel, market, or audience.

4Preventive controls and safe design practices

Controls work best when built into the workflow. Use approved asset libraries and a maintained license register instead of pulling images from the open web. Treat every new logo or name as a clearance question. Run trademark searches appropriate to the target markets, recognizing that search depth varies and that clearance decisions belong to qualified professionals.

Truthful communication is a core control. Every product statement should link to evidence in the project file. Avoid imagery that implies endorsement, certification, awards, or performance the organization cannot support. Do not use before-and-after visuals, testimonial graphics, or statistics without written substantiation.

• Mandatory: every factual or performance claim in a brand asset links to a source document held in the project file.
• Mandatory: do not place third-party logos, certification marks, or award badges without written permission and confirmation that the status is current.
• Mandatory: text meets the minimum size and contrast standard in the approved brand guideline.
• Recommended: use plain language for warnings, consent prompts, and safety instructions, and test them with a few real users where practical.

5Equipment, workspace, and information safeguards

Workstations should support long screen sessions. Position monitors so the top of the screen sits near eye level and an arm's length away, adjust chairs and keyboards for a neutral posture, and take regular breaks. Report recurring pain or discomfort early to the project owner. Calibrate displays where color decisions depend on them, following the display manufacturer's instructions. Print, cutting, and mounting equipment presents physical hazards. Operate it only after authorization and training, use guards and blade-safety practices from the shop manual, and obtain the supplier's safety data sheet before handling inks, coatings, adhesives, or solvents.

Project files often contain personal data such as customer names, email lists, staff photos, or test accounts. Use synthetic or anonymized data in mockups. Store files in access-controlled locations, strip metadata from images before external sharing, and never paste credentials or private links into shared design documents. Privacy and data protection requirements vary by jurisdiction and should be confirmed with qualified advisers.

• Mandatory: no real customer or employee personal data appears in public mockups or portfolios without written consent.
• Mandatory: share drafts through approved, access-controlled platforms, using expiring links where available.
• Mandatory: use only licensed fonts and software, and keep license records current.
• Recommended: review ergonomic setup at the start of each project phase.

6Consent, rights, and truthful communication

Any identifiable person in a brand image needs documented consent that covers the specific use, channel, duration, and territory required by the project. Model releases and talent agreements should be signed before a shoot or publication. Minors require parental or guardian consent and additional review, and many jurisdictions impose special rules, so verify locally. Copyright protects most original artwork, photographs, illustrations, and typefaces. Using them requires a license that matches the intended use, including print runs, paid media, and merchandise.

Platform rules on advertising, branded content, sensitive categories, and minors differ and change. Check the current policies of each channel before launch. Where AI tools generate or edit imagery, record the tool, its terms of use, and any disclosure the client or channel requires, then confirm that the output rights match the intended use.

• Mandatory: no identifiable person appears in a brand asset without a signed release covering that specific use.
• Mandatory: never imitate a competitor's logo, trade dress, or protected slogan.
• Mandatory: AI-generated or AI-edited assets are logged with tool, terms, and disclosure notes.
• Recommended: avoid stereotyped or demeaning depictions and test concepts with a diverse review panel.

7Incident reporting, escalation, and response

An incident includes a published asset that infringes rights, a misleading claim, a privacy exposure, a platform takedown, a complaint about a harmful depiction, a lost or leaked file, or a near miss caught before release. Report it the same working day to the project owner, who logs it and notifies the compliance or legal reviewer. If a live asset is causing harm, pause distribution first, then investigate. Do not delete files or messages, because records are needed for investigations, takedown responses, and corrective action.

Physical injuries, fires, or chemical exposures in studios, print shops, or photo shoots are handled by trained first aid staff and emergency services. Designers must not improvise rescue or treatment. Public responses to complaints are made only by authorized spokespersons, using a reviewed holding statement.

• Mandatory: pause or withdraw a live asset when a rights, privacy, or accuracy problem is confirmed or reasonably suspected.
• Mandatory: preserve original files, version history, and approval emails.
• Mandatory: call emergency services for injuries, fire, or suspected chemical exposure, and follow the posted emergency plan.
• Recommended: prepare holding statements with legal or communications staff before a public complaint arises.

8Records, training, review, and continuous improvement

Each project file should contain the brief, risk rating, license register, release forms, claim substantiation, approval records, and final approved versions. Retention periods depend on contracts and jurisdiction, so confirm them with counsel. Training should cover this document, approved tools, print and shop safety, privacy, accessibility, and changes in platform policy.

The project owner should review these norms on a scheduled cycle and after any significant incident. Incident logs and near-miss records should drive updates to controls. This document is a starting point. Local procedures, professional advice, manufacturer instructions, and applicable law take precedence wherever they differ.

• Mandatory: complete rights, privacy, and tool training before accessing client or public asset libraries.
• Mandatory: update the license register when a license expires or its scope changes.
• Recommended: hold a short retrospective after each high-risk project and record lessons learned.

Implementation checklist

• Assign one accountable owner and record the risk rating in the project brief.
• Confirm every image, font, and icon has a license that matches the intended use.
• Obtain signed releases for every identifiable person before the asset is used.
• Link each factual or performance claim to substantiating evidence in the file.
• Check trademarks, trade dress, certification marks, and awards for permission and currency.
• Verify contrast, minimum text size, and alt text against the approved guideline.
• Remove real personal data and image metadata from any externally shared draft.
• Check current platform and advertising policies before launch.
• Log any AI-generated or AI-edited content with tool, terms, and disclosure notes.
• Report incidents the same working day and pause live assets when risk is suspected.
• Store records in the project file and schedule the next norms review.