CCTV Laws & GDPR UK | Legal Guide for Homeowners & Businesses

Installing CCTV cameras in the UK — whether at home or at your business premises — comes with clear legal responsibilities under UK GDPR and ICO guidelines. This guide covers everything you need to know before, during and after installation — from where you can legally point your cameras to what data retention rules apply to your property. All CCTVcam installations across South London are fully compliant with UK GDPR and ICO guidelines — written guidance provided with every installation as standard.

Yes — CCTV installation is completely legal in the UK for both residential and commercial properties. However the law distinguishes clearly between cameras that cover your own property only and cameras that capture images of neighbours, public spaces or other people’s property without justification. Understanding this distinction is essential before any installation.

The key legislation governing CCTV use in the UK includes:

• UK GDPR (General Data Protection Regulation) — the primary framework governing how personal data including CCTV footage is collected, stored and used
• Data Protection Act 2018 — the UK’s implementation of GDPR post-Brexit
• ICO (Information Commissioner’s Office) guidelines — the UK’s data protection regulator, which publishes specific guidance on CCTV use for both homes and businesses
• Human Rights Act 1998 — Article 8 protects the right to privacy, which must be balanced against legitimate security needs

If you are installing CCTV at your home, the rules are relatively straightforward — but there are important boundaries you must stay within.

What you can legally do:

• Install cameras covering your own property — front door, driveway, rear garden, side passages and any area within your boundary
• Record footage for your own personal security purposes
• Use footage as evidence if a crime occurs on your property

What you must avoid:

• Pointing cameras at neighbours’ gardens, windows or driveways — this captures personal data without consent and is a breach of UK GDPR
• Covering public pavements or roads beyond your immediate entrance — any camera that captures significant footage of a public area may bring you under commercial GDPR obligations even as a homeowner
• Installing cameras inside shared or communal areas of a block of flats without the freeholder’s permission — communal hallways and stairwells in leasehold properties require consent from the building owner

The domestic exemption: UK GDPR includes a domestic exemption for cameras used purely for personal household security — meaning most homeowners are not required to register with the ICO or display CCTV signage. However this exemption only applies if your cameras do not capture images beyond your own property boundary. If they do, you may fall outside the domestic exemption and become subject to full commercial GDPR obligations.

Our advice: during every free site survey our engineers assess camera angles to ensure coverage stays within your property boundary — protecting you legally while maximising your security coverage.

Commercial CCTV installation carries significantly more legal responsibility than residential. If you operate a business and use CCTV, you are classed as a data controller under UK GDPR — and this brings a clear set of obligations.

Registration with the ICO: Most businesses that operate CCTV must register with the Information Commissioner’s Office (ICO) as a data controller and pay an annual data protection fee — currently £40-£60 per year depending on organisation size. Failure to register is a criminal offence.

Signage requirements: All commercial CCTV systems must be clearly signposted with:

• A notice informing people they are being recorded
• The name of the data controller (your business)
• Contact details for data subject access requests
• Signage must be visible at all entry points where cameras are in operation

Data retention:

• Footage should only be retained for as long as necessary — typically 30 days for most commercial premises
• Longer retention requires justification (e.g. ongoing investigation)
• Footage must be stored securely and access restricted to authorised personnel only
• When footage is no longer needed it must be securely deleted

Staff and employee monitoring:

• If cameras cover areas where employees work, staff must be informed — ideally through a written CCTV policy
• Covert monitoring of employees is only lawful in very limited circumstances and requires specific justification
• Cameras must never be installed in toilets, changing rooms or other private areas

Subject access requests: Any individual captured on your CCTV footage has the right to request a copy of footage in which they appear — you must respond within one calendar month and provide the footage free of charge (after redacting any third parties shown).

Houses in Multiple Occupation (HMOs) sit in a middle ground between residential and commercial — and the rules reflect this.

What is permitted:

• Cameras in communal areas — hallways, stairwells, entrances, shared kitchens and living areas — are permitted with appropriate notice to tenants
• External perimeter cameras covering the building entrance and car park are permitted

What is strictly prohibited:

• Cameras must never be installed in private living spaces — bedrooms, bathrooms or any area where tenants have a reasonable expectation of privacy
• Installing cameras in private areas without consent is a criminal offence under the Voyeurism (Offences) Act 2019 and may also breach UK GDPR

Tenant notification: Tenants must be informed about CCTV in writing — ideally as part of the tenancy agreement — including what is recorded, how long footage is retained and who has access.

One of the most common sources of neighbour disputes involving CCTV is cameras that inadvertently — or deliberately — capture neighbouring properties. If a neighbour complains that your camera points at their garden or windows, the ICO can investigate and require you to reposition or remove the camera. In serious cases, enforcement notices can be issued.

Key points to avoid disputes:

• Position cameras to point downward at your own driveway or entrance — not horizontally across at neighbouring properties
• Use privacy masking features (available on most Hikvision systems) to digitally block out neighbouring areas from the camera’s field of view
• If a neighbour raises a concern, engage constructively — repositioning a camera is far less costly than an ICO investigation

• Homeowners — generally no, if cameras cover your own property only (domestic exemption applies)
• Businesses — yes, most businesses must register with the ICO as a data controller
• Landlords and HMOs — yes, if cameras cover communal areas with multiple tenants
• Sole traders working from home — depends on whether cameras cover areas beyond personal household use

If you are unsure whether you need to register, the ICO website provides a free self-assessment tool at ico.org.uk.

All CCTVcam installations include:

• Free site survey — camera angles assessed to ensure legal compliance before installation
• Written GDPR guidance — tailored to your property type (residential, commercial or HMO)
• Signage recommendations — for commercial and HMO installations
• Privacy masking setup — where cameras are near property boundaries
• Data retention advice — appropriate retention periods for your specific use case

Our engineers install and configure systems that are legally compliant from day one — so you never have to worry about ICO complaints or neighbour disputes.

---

• Home CCTV Installation — residential systems across South London
• Commercial CCTV Installation — business security across South London
• Installation Packages — from £700 fully installed
• Remote Monitoring — included with every installation
• CCTV Installation Blog & FAQ — guides and advice for South London homeowners
• Contact us for a free site survey

Looking for information on CCTV laws and UK GDPR? This guide covers everything homeowners, landlords, HMO managers and businesses need to know about legally installing and operating CCTV cameras in the UK — including ICO registration, signage requirements, data retention rules, neighbour disputes and subject access requests. All CCTVcam installations across South London are fully compliant with UK GDPR, the Data Protection Act 2018 and ICO guidelines — written guidance and signage recommendations included with every installation. Free site survey — no obligation.