CCTV Regulations in the UK: What Homeowners and Businesses Must Do
The key test is simple: what does the camera see? If your home CCTV only captures your own property, data protection law does not apply to it. As soon as it records beyond your boundary (a neighbour's garden, the pavement, a shared drive), UK GDPR and the Data Protection Act 2018 apply, and you take on duties such as signs, sensible retention and answering requests for footage. Businesses using CCTV are covered from the start, and the Information Commissioner's Office (ICO) regulates both.
Home CCTV that only covers your own property
GOV.UK says data protection rules do not apply if you install a camera on your own home for household purposes, for example to protect it from burglary. That household exemption only holds while every camera captures your own property. If none of them sees past your boundary, you have no data protection duty to put up signs, keep a retention policy or hand over footage.
The ICO's advice is that, where possible, owners should position cameras to capture only their own property, and use filters or privacy blockers where they cannot. Many modern cameras let you draw privacy masks over parts of the picture, such as a neighbour's window or the public footpath, so the recorder blanks those areas out. Used properly, masking can keep a front door camera inside the household exemption, which is why we plan every camera view before fitting CCTV systems for homes and businesses.
When your home camera sees past your boundary
In the ICO's own words, if CCTV "captures someone else's property, a public area or communal space, then data protection law applies." For a typical front door or driveway camera, that includes the street, the pavement and next door's path. At that point the household exemption no longer covers you, and UK GDPR and the Data Protection Act 2018 apply. Smart doorbells are covered too: both the ICO guidance and the government guidance on domestic CCTV include them.
Once the law applies, the ICO says you must:
have a clear reason for the camera, usually protecting your property and family;
make sure it does not capture more than it needs to;
put up signage that indicates CCTV is in operation;
delete footage regularly or automatically, or both;
keep the recordings secure and limit who can see them;
respond to people who ask for footage of themselves, usually within one calendar month;
stop recording someone who objects, unless you have a strong reason to carry on.
The government guidance adds a practical point: recordings should be used only for the purpose the system was installed for, and "it will not be appropriate to share any recordings on social media sites."
Do you need CCTV signs?
At home, you need a sign if your cameras record beyond your boundary. The government guidance also suggests telling your neighbours about the system, which can head off a dispute before it starts.
For a business, signs are a standard requirement. GOV.UK says businesses must tell people they may be recorded, usually by displaying signs, "which must be clearly visible and readable". The ICO checklist for small systems adds that contact details should be on the sign if it is not obvious who is responsible for the system. The ICO's example wording states what the cameras are for (for example crime prevention and public safety), who controls the system, and a website or phone number for more information.
CCTV rules for businesses and landlords
Business CCTV carries more duties because the household exemption never applies. The main ones, from GOV.UK and ICO guidance, are:
Register and pay the fee. A business using CCTV must register with the ICO and pay the data protection fee, unless it is exempt.
Define the purpose. A system set up to detect crime must not then be used to monitor how much work staff do.
Use signs. Clearly visible and readable, with contact details unless it is obvious who runs the system.
Answer access requests. Anyone can ask for images of themselves, which you must usually provide free of charge within one calendar month.
Set a retention period. UK GDPR and the DPA 2018 do not prescribe any minimum or maximum retention period. You decide one based on your purpose, write it down and stick to it.
Assess the risk. The ICO says a data protection impact assessment is required for any processing likely to result in a high risk to individuals, and that this applies in most cases of surveillance.
Name a responsible person. The ICO checklist asks for a named individual to be responsible for the system.
Can CCTV record audio?
Audio is where many systems go wrong. The ICO counts voices as personal information, so a camera that picks up conversations beyond your boundary can bring you under data protection law even if the picture stays inside it. For organisations, the ICO says surveillance systems should not normally be used to record conversations between members of the public, and audio should be switched off by default.
Many cameras and doorbells ship with audio recording switched on. When we set up CCTV for customers in Wolverhampton, Telford and across Shropshire, we turn it off unless there is a clear reason for it.
Can my neighbour point CCTV at my house?
They can, but if their camera records your property, their use of it is covered by data protection law and they must follow the rules above. That gives you some rights. You can ask them for a copy of footage that shows you (a subject access request), and you can object to being recorded.
The ICO's guidance on home CCTV suggests starting by talking or writing to the owner (it provides a template letter), then following the government's steps for neighbour disputes:
Talk to your neighbour informally. They may not realise what the camera covers, and a privacy mask or a small change of angle often fixes it.
If your neighbour is a tenant, you could contact their landlord.
Try a mediation service if talking does not work.
Contact the police if your neighbour is being violent or harassing you. The ICO notes the police are unlikely to treat CCTV alone as harassment without other misconduct.
As a last resort, take legal action through the courts.
If the owner ignores your data protection rights you can also complain to the ICO, but be realistic about what it will do. Its guidance says that in most instances it cannot or will not remove a person's camera, force them to reposition it, or make them delete recordings of you.
Who else sets rules for CCTV?
You may see references to the Surveillance Camera Code of Practice. Government guidance explains that the code applies to relevant authorities (police forces, local authorities and parish councils) using cameras in public places in England and Wales. It does not regulate domestic CCTV, although homeowners and businesses are encouraged to follow it voluntarily.
The ICO also notes that its CCTV guidance is under review following the Data (Use and Access) Act 2025, so check its website for any updates before relying on the detail.
CCTV law questions, answered
How long can I keep CCTV footage?
There is no fixed legal period. For homes, government guidance says not to keep recordings longer than necessary to protect your property. For businesses, choose a period that fits your purpose, record it, and make sure the recorder overwrites automatically. Many systems simply loop once the hard drive fills, so the drive size effectively sets your retention.
Will CCTV footage stand up as evidence?
It can, if the date and time are correct and you can export it cleanly. Government guidance tells owners to check the date and time are accurate and to ask their installer how to export footage. If you are unsure, check with your installer or local police that the recordings are usable.
Can I put CCTV in a rented property?
A landlord filming tenants inside their home raises serious privacy issues and falls under data protection law. Cameras covering shared entrances or car parks in a block also capture communal space, so the full set of duties applies.
Getting the positioning right at the start is far easier than fixing a dispute later, and it is part of every CCTV installation we carry out. If you are weighing up the price of a system as well, our guide to CCTV installation cost covers what goes into a quote.
Comments