cctv

Can filming drunken patrons using CCTV in a licensed premises be classed as 'proportionate' under UK law? UK Pubs, Bars and Restaurants CCTV rules explained 2026

Published on

Can filming drunken patrons using CCTV in a licensed premises be classed as 'proportionate' under UK law? UK Pubs, Bars and Restaurants CCTV rules explained 2026

Can filming drunken patrons using CCTV in a licensed premises be classed as 'proportionate' under UK law?

Under the Data Protection Act 2018 (DPA 2018) and GDPR, the principle of 'data proportionality' is paramount. Simply because a patron is misbehaving does not automatically grant permission to film them, nor does it mean the recording is proportional. CCTV must always be necessary for a specific, legitimate purpose, such as deterring theft or monitoring for violence, rather than merely documenting behaviour. If the primary purpose shifts to identifying individuals for non-safety related matters, the recording is likely to be deemed disproportionate. Furthermore, clear signage detailing the lawful basis for processing data (e.g., 'Crime Prevention') is a legal requirement in all UK licensed premises. Any retention of footage must be strictly limited to the necessary period, usually only days, and accessed only by designated, trained staff.

More questions about Pubs, Bars and Restaurants:

No, explicit consent is generally not required for the installation of CCTV in public-facing areas of a licensed premise. Instead, you must demonstrate a lawful basis for processing the data, which is usually 'Legitimate Interest' (e.g., protecting property and people). Crucially, you must display clear, conspicuous signage at the entrance detailing the nature of the recording, the purpose, and who the data controller is. This signage acts as the legal notification required by UK data protection best practice.

Does monitoring the smoking area constitute a separate data processing activity under GDPR?

Yes, if the smoking area is monitored, it must be treated as a distinct zone under your CCTV policy. You must justify why the monitoring is necessary for that specific area-perhaps due to high rates of theft or anti-social behaviour there. This justification must be documented, and the scope of the cameras should be narrowly focused only on the area needing protection, rather than capturing general ambient footage.

Is it illegal to view CCTV footage outside of peak operational hours?

Viewing CCTV footage at any time is legal, provided the viewing adheres strictly to your established internal CCTV policy. The key legal consideration is that only trained, authorized personnel should access the footage, and the viewing must be logged (who, when, and why). Viewing footage for 'snooping' or personal curiosity, without a legitimate operational or investigative reason, constitutes a severe breach of policy and potentially the law.

Must I provide a Data Protection Impact Assessment (DPIA) when upgrading my existing CCTV system?

While a DPIA is not always mandatory, it is highly recommended, particularly when making significant upgrades or changing the scope of the system (e.g., adding facial recognition technology). A DPIA systematically identifies and mitigates privacy risks associated with the new technology, proving to both your staff and the ICO that you have taken all reasonable steps to comply with data protection law.

For free CCTV surveys and compliance advice, call: 07830 638 337

GitHub: https://github.com/gazpearce/gary-ai-assistant

Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b5810fa523e75d6e35ec7f

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant