She probably could sue you, but if the photos were taken down in less than 5 minutes as you say, likely her provable damages would be limited. It might also depend on the nature of the photos (how embarassing they were, etc.) and whether there are any provable consequences from her one friend viewing the photos. You have a defense of an oral agreement allowing you to use the photos, but obviously she does not agree. As you noted, getting your agreements in writing is the way to avoid this. I would not worry too much about this, but you do need to be more careful about documenting. If she does sue, I would retain a lawyer to look at the lawsuit so you can have this matter reviewed in more detail. Save all your documentation, including any emails or proof as to the length of time the photos were online and how many people viewed them.
Posts on this forum are intended for educational and information purposes only and do not create an attorney client relationship. The answers posted should not be treated as legal advice. The posts are intended to be accurate but are based on incomplete information and may be truncated for expediency or to avoid disclosing confidential advice on a public forum. They are not a substitute for speaking directly with an attorney in your area. Mr. Thayer is licensed in Washington state only and laws in your jurisdiction may vary.
Obviously you should have written contracts in the future, especially for something as sensitive as boudoir photographs. It should clearly spell out who owns the copyright and what you can and can not do with the pictures. As you know, it is common for the photographer to retain the copyright ownership. You will have fewer disputes and unhappy customers if you are clear about this upfront. The model release is actually less important although it can not hurt.
As for the current situation, she can sue you for a variety of causes of action, including infliction of emotional distress, breach of contract and invasion of privacy. If you can prove you had permission, then you would prevail. But even if she wins, she still has to prove damages. I am a little suspicious how you could know who viewed your facebook page. But I will take you at your word. If the facts are as you say, then there are no damages. This should discourage her from suing.
You may also want to do damage control with your unhappy customer. Let her know you thought you had her permission, that you took the photographs down immediately, no strangers saw them, and you will not post them again. Tell her you have learned for your experience and you are going to have an attorney write up a release that clearly states what is expected of you and your customers. And then do it.
This answer is not intended to be a substitute for personalized legal advice. I have presented only an overview of the legal issues. There are many nuances and some exceptions to general legal principles. Real problems are very fact based.. If you have a specific legal problem, you should consult an attorney. You can find more useful information on my law firm website resources page at www.marshallcomputer.com or you can contact me directly at email@example.com or (206) 524-0655.
I agree with my colleagues. You ALWAYS, ALWAYS, ALWAYS want to get your releases in writing. If the person involved is a minor, you need to get a release from the parent or guardian. I agree that you may want to be proactive in terms of damage control. You might offer some consideration, but at least an apology seems to be in order.
Many people do not apologize thinking it will be seen as a sign of weakness. When plaintiffs are later asked about the case, however, many of them say, "He never even said he was sorry. If he had said he was sorry, I would have let it go."
If she files legal action, you will want to get an attorney to represent you. Otherwise, I would try to handle this on your own in a professional way and hope that it provides you with an inexpensive lesson that will benefit you in the future.
***Please be sure to mark if you find the answer "helpful" or a "best" answer. Thank you! I hope this helps. ***************************************** LEGAL DISCLAIMER I am licensed to practice law in the State of Michigan and have offices in Wayne and Ingham Counties. My practice is focused in the areas of estate planning and probate administration. I am ethically required to state that the above answer does not create an attorney/client relationship. These responses should be considered general legal education and are intended to provide general information about the question asked. Frequently, the question does not include important facts that, if known, could significantly change the answer. Information provided on this site should not be used as a substitute for competent legal advice from a licensed attorney that practices in your state. The law changes frequently and varies from state to state. If I refer to your state's laws, you should not rely on what I say; I just did a quick Internet search and found something that looked relevant that I hoped you would find helpful. You should verify and confirm any information provided with an attorney licensed in your state. I hope you our answer helpful!