Is it necessary to have a patient authorization prior to taking their picture for an EMR account?

This is just a mug shot not pictures of lesions etc.
The picture would display when the chart or account is opened.

We have not been able to located anything definative regarding this issue and would appreciate your assistance:confused.