Domestic CCTV and the ICO
Cameras that only cover your own property (inside your home, your driveway, your garden) are exempt from ICO registration and most data-protection rules under the domestic purposes exemption. However, the moment a camera captures any part of a public road, pavement or a neighbour's property, the full UK GDPR and DPA 2018 regime applies.
Cameras covering public areas
If any part of your camera's field of view captures a public area, you must display a visible CCTV sign (no minimum size prescribed, but it must be readable), have a legitimate purpose (security, crime prevention), retain footage for no longer than necessary (28–31 days is typical), and be able to respond to a Subject Access Request within one month if an individual asks to see footage containing them.
Neighbour disputes
Cameras that deliberately overlook a neighbour's garden or interior can constitute harassment under the Protection from Harassment Act 1997 and a breach of UK GDPR. Courts have ordered removal of cameras in such cases. Position cameras to cover only what you need to cover — our engineers will advise on angles during the free site survey.
Business CCTV — ICO registration
Businesses operating CCTV that captures identifiable individuals are almost always required to register with the ICO as a data controller (annual fee: £40–£60 depending on turnover). Failure to register is a criminal offence with fines up to £4,000. Registration is straightforward and takes around 15 minutes online.
Workplace CCTV
Employees must be informed that CCTV is in use, what it is used for and how long footage is kept. Covert surveillance of employees is only lawful in very limited circumstances (suspected criminal activity) and requires legal advice before implementation. Routine monitoring of staff without notice is likely to breach UK GDPR.
Retention periods
There is no legal maximum retention period for CCTV footage in the UK, but ICO guidance is that footage should be retained only as long as necessary for the purpose it was collected. For general crime-deterrence purposes, 28–31 days is the accepted standard. Longer retention requires justification.
This guide is for general information only and does not constitute legal advice. Consult a solicitor or the ICO for advice specific to your situation.
Get a CCTV Survey from NSI-Approved Engineers
We will position cameras to maximise coverage and comply with ICO guidance. Free site survey, no obligation.