CCTV Laws UK 2026: What Homeowners & Businesses Must Know

If you’re thinking about installing CCTV — at home, in a shop, warehouse, office, yard, or HMO — the big question is:

“Is my CCTV legal?”

The good news is: in most cases yes — as long as it’s installed and used properly.

This guide explains CCTV laws in the UK for 2026, in plain English, so you can protect your property without falling foul of GDPR, the Data Protection Act, or the ICO.

Quick note: This is general guidance — not legal advice. If your CCTV covers members of the public, staff, tenants, or shared areas, get proper advice or speak to your installer.

If you’re planning a new system and want to make sure it’s compliant, our CCTV installation in Hull and East Yorkshire service includes advice on signage, retention and responsible use.

✔️ You CAN use CCTV at home and for business

✔️ You must have a valid reason for using it (security, prevention of crime, safety etc.)

✔️ You should only record what you need (not half the street if you can avoid it)

✔️ Signs must be visible where CCTV operates (for businesses, always; for homes, usually best practice)

✔️ Keep footage secure and only as long as necessary (often 7–30 days)

✔️ People may request copies of footage about themselves

❌ Don’t use CCTV to spy on neighbours, staff, tenants or children

❌ Don’t post footage online without a lawful reason

Homeowners

If your cameras only cover your own boundary (garden, driveway, etc.), the rules are lighter — but still follow best practice.

If your system records beyond your boundary (pavement, road, neighbour’s garden), then data protection laws apply.

Businesses & landlords

Businesses, landlords and organisations are almost always classed as data controllers. That means extra responsibilities including:

• signage

• retention policy

• access controls

• handling requests for footage

• keeping a record of why CCTV is used

CCTV is mainly covered by:

• GDPR

• Data Protection Act 2018

• ICO CCTV guidance

• Human Rights considerations (privacy) in certain environments

In simple terms:

If your CCTV records people, you must handle the footage fairly, securely, and transparently.

Here’s a simple checklist that keeps most homes and businesses compliant:

1️⃣ Have a clear reason for CCTV

Security, safety, crime prevention, monitoring access — all valid.

“Because I’m curious” isn’t.

---

2️⃣ Avoid recording more than you need

Angle cameras so you mainly capture:

• your entrance

• car park/yard

• staff or customer areas where security is required

If you must capture public areas, minimise it where possible.

---

3️⃣ Put up clear CCTV signs

Signs should explain that CCTV is in use and give contact details.

Businesses: This is mandatory.

Homes: Strongly recommended (and helps avoid disputes).

We also explain more here about whether CCTV signs are required and what they should say.

---

4️⃣ Keep footage securely stored

Password-protect recorders, restrict access to trusted people, and avoid unsecured cloud uploads.

Never share footage casually on social media — it almost always breaches privacy rules.

---

5️⃣ Don’t keep footage longer than necessary

Most systems are set to 7–30 days, unless footage is needed as evidence.

---

6️⃣ Be ready for subject access requests (SARs)

Someone can ask:

“Do you have CCTV footage of me?”

If you do — and it doesn’t impact others’ privacy — you may need to provide it.

Businesses must take this seriously.

If you run CCTV where staff work, laws become stricter:

• You must tell employees clearly

• Covert cameras are almost always illegal unless part of a very specific police-style investigation

• Avoid cameras in toilets, break rooms, changing areas, etc.

Use CCTV for safety and security, not micromanagement.

Landlords and HMO managers must ensure CCTV is:

• installed for safety/security

• clearly explained to tenants

• not used to monitor their private lives

Shared halls, entrances, car parks and bin stores are usually acceptable.

Continuous audio recording is rarely justified and can easily breach privacy rules.

We normally advise:

• No audio, or

• Event-based audio only in very specific scenarios

There’s no single number — the test is:

“Only as long as necessary.”

For most installations, 7–30 days is reasonable.
For high-risk sites, slightly longer may be justified.

Document your decision in a simple retention policy.

Yes — if it’s:

• legally obtained

• time-stamped

• stored securely

• not tampered with

Another reason professional installation matters.

“It’s my house — I can film anything.”
❌ Not if it captures other people unfairly.

“If someone’s on my property, I can post the video online.”
❌ Usually illegal unless police request or legally justified.

“Businesses don’t need signs anymore.”
❌ They do. Always.

When we install CCTV, we design systems that:

• protect you legally

• reduce complaints

• avoid ICO issues

• still do the job: prevent crime and capture evidence

We’ll also advise on signage, retention settings, and responsible use.

Not always — but it’s strongly recommended if any footage captures public space.