cctv

Can CCTV record common areas without explicit consent from every resident? UK Care Homes and Assisted Living CCTV rules explained 2026

Published on

Can CCTV record common areas without explicit consent from every resident? UK Care Homes and Assisted Living CCTV rules explained 2026

While obtaining explicit written consent from every resident in a care home setting is ideal, it is often impractical and impossible, particularly for those with cognitive impairments or those who are semi-conscious. The legal guidance, rooted in the Data Protection Act 2018 (DPA 2018) and GDPR, focuses not on absolute consent, but on the principle of 'lawful basis' for processing personal data. Care homes must demonstrate a legitimate interest, such as ensuring safety, investigating safeguarding concerns, or deterring theft. This requires clear signage informing residents and visitors of the recording, robust policies, and a Data Protection Impact Assessment (DPIA) to justify the necessary scope and necessity of the footage. Furthermore, the surveillance must be proportionate; recording areas where privacy is paramount (like bedrooms) is generally forbidden unless absolutely necessary and strictly justified. Any system must be designed to minimise data collection, only recording what is needed, and ensuring that stored footage is handled securely and deleted when no longer necessary.

More questions about Care Homes and Assisted Living:

Must CCTV footage be accessible to residents' families?

No, CCTV footage is not automatically accessible to families. The fundamental principle is that the data belongs to the resident, and access must be managed by the care home's Data Protection Officer (DPO). Families can request access under Subject Access Request (SAR) rights, but the care home must first assess if the release of the footage compromises the resident's dignity, safety, or privacy. Care homes should establish a clear, written protocol outlining who can view the footage, under what circumstances, and for what duration.

Redaction refers to the process of deliberately obscuring sensitive data before sharing or viewing the footage. In a care home context, this often means blurring the faces or obscuring specific identifying details of individuals who are not central to the investigation or concern. It is best practice to redact data by default when sharing footage with external parties (like police or family members) unless the full, unredacted view is absolutely vital to the investigation.

Do 'Smart' or AI-enabled CCTV systems count as additional data processing?

Yes, absolutely. Any advanced CCTV system that uses AI, facial recognition, gait analysis, or automated alerts constitutes 'processing' of personal data, often considered biometric data. Because this is highly sensitive, the care home must ensure that the system is fully compliant with the DPA 2018. Implementing such technology requires significantly more rigorous justification, thorough employee training, and explicit sign-off from senior management and the DPO.

If an incident occurs, can the care home use CCTV to monitor residents after hours?

Monitoring residents after hours using CCTV is generally considered highly invasive and should be avoided unless there is an immediate, documented, and credible threat to life or safety. If such monitoring is unavoidable (e.g., managing a known risk of wandering), the care home must have explicit policies in place detailing the 'trigger' for activation, the duration of the monitoring, and who has the authority to view the footage. Such extreme measures must always be documented and reviewed by the care home's safeguarding lead.

For free CCTV surveys: Phone: 07830 638 337

GitHub: https://github.com/gazpearce/gary-ai-assistant

Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b5819ca238fa1b98a1b7d7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant