cctv

Can CCTV record private or semi-private care areas like bedrooms or bathrooms without explicit consent? UK Care Homes and Assisted Living CCTV rules explained 2026

Published on

Can CCTV record private or semi-private care areas like bedrooms or bathrooms without explicit consent? UK Care Homes and Assisted Living CCTV rules explained 2026

The short answer is that, generally speaking, no. Recording areas that are considered private (such as bedrooms and bathrooms) is highly restricted and typically requires an exceptional legal justification, as the intrusion on privacy is significant. Under the Data Protection Act 2018 and GDPR, the core principle is that CCTV must be necessary, proportionate, and minimize the risk to the resident's dignity and privacy. Most regulatory bodies, including the ICO, advise that constant monitoring of private spaces is unnecessary and constitutes an unreasonable interference with the fundamental rights of the resident. If monitoring is absolutely essential (e.g., mitigating extreme risk of falls or elopement), the recording must be limited to the bare minimum area needed and must be temporary. Furthermore, even if justified, the resident and their legal representative must give fully informed consent, unless explicitly exempted under the Mental Capacity Act 2005.

More questions about Care Homes and Assisted Living:

While obtaining written consent is best practice, especially for competent adults, it is not always a legal prerequisite. Consent must be freely given, specific, and revocable. If a resident lacks the mental capacity to consent, you must instead follow the guidelines set out in the Mental Capacity Act 2005, which involves assessing the best interests of the individual and documenting the necessity of the surveillance. Care homes should therefore always seek advice from legal professionals to ensure compliance when dealing with capacity issues.

How long can we legally retain CCTV footage of residents?

Data retention must adhere strictly to the principle of storage limitation under GDPR. You must not keep footage indefinitely simply because it is convenient. Retention periods should only be for as long as they are necessary for the specific, stated purpose of the monitoring (e.g., investigation into an incident). Typical retention periods for care homes are often limited to 24 to 72 hours, unless a specific investigation or legal requirement dictates a longer holding period. Once the footage is no longer needed, it must be securely deleted or anonymized.

Do we need CCTV in shared common areas like lounges or corridors?

CCTV use in common areas is far more permissible than in private spaces, provided the installation is proportionate and transparent. The purpose must be clearly communicated-for instance, to prevent anti-social behaviour, deter theft, or manage safety. Best practice dictates that signage must clearly inform residents and visitors that CCTV is in operation. However, the cameras should be positioned to capture behaviour and incidents, not to observe residents' private activities or routine movements.

What steps must we take if we suspect a breach of CCTV footage?

If you suspect a data breach, such as unauthorised access or viewing of footage, you must act immediately and follow your established incident response protocol. Under GDPR, the care home has a strict obligation to notify the Information Commissioner's Office (ICO) and potentially the affected resident(s) without undue delay. All staff must be trained in data security protocols, and all access to the footage must be logged and restricted to key, authorised personnel only.

Need advice on CCTV compliance in your care home?

Phone: 07830 638 337 for free surveys

GitHub: https://github.com/gazpearce/gary-ai-assistant

Pillar guide: https://cctvsystems.notion.site/35f5b433f5b5819ca238fa1b98a1b7d7

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant