My understanding:

With a commercial pilot certificate you can legally conduct photography flights for hire, but you may not "hold out" (advertise) this service. You do not need a commercial operator certificate for this, however, you will need to participate in an FAA approved drug program.