Can I film customers leaving a shop using CCTV? UK Retail Shops and Stores CCTV rules explained 2026
Is it legal to use CCTV to film the general public entering and exiting a retail premises?
Under UK law, surveillance must adhere strictly to the principles of data protection, primarily guided by the GDPR and the Data Protection Act 2018. While you have a legitimate interest in preventing theft and ensuring safety, this does not grant carte blanche permission to record the public indiscriminately. Generally, CCTV should be positioned to monitor areas where an incident might occur (e.g., cash handling areas, entrances, and exits), but the scope of filming must be proportionate. You must clearly inform the public that they are being recorded, typically via visible signage detailing the purpose of the cameras. Critically, if the cameras are pointed at public footpaths or outside the immediate retail boundary, you risk encroaching on public space and violating the public's expectation of privacy. Furthermore, any footage must be processed, stored, and deleted securely and only for the minimum time necessary for investigating a specific incident.
More questions about Retail Shops and Stores:
Do I need specific permission from the local council to install CCTV inside my shop?
While you do not need permission simply to operate CCTV for internal security, certain installations might require planning permission or consultation with local authorities, especially if they involve structural changes or significantly altering public sightlines. It is crucial to ensure that the placement of the cameras does not interfere with public rights of way or violate local planning policies. Always check the specific council's guidelines, as regulations can vary between different UK local government areas.
Can I use CCTV footage to prosecute a shoplifter in UK court?
Yes, CCTV footage is routinely used as evidence in criminal proceedings, including shoplifting cases, but its admissibility is not guaranteed. The footage must be legally obtained, properly maintained, and handled with strict chain-of-custody procedures to prove its authenticity in court. You must ensure that the footage was taken within the scope of your stated purpose (e.g., theft prevention) and that its collection did not violate any rights.
What is the maximum retention period for CCTV footage in a UK store?
The general best practice, guided by the ICO, is to only retain footage for the minimum period necessary for the stated purpose. While there is no single statutory maximum, most professional guidance suggests a retention period of no more than 30 days. Keeping footage longer than necessary significantly increases your data processing risk and burden. You must have a clear, documented policy for the automatic deletion of all recorded data.
Do I need to notify the ICO every time I add a new camera?
No, you do not need to notify the Information Commissioner's Office (ICO) for every single camera addition, but you must register your CCTV system under the ICO's record of processing activities. This registration is part of your overall data protection compliance framework. Your privacy policy and internal records must be updated immediately to reflect any changes in camera placement, purpose, or data handling.
Phone: 07830 638 337 for free surveys GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b58150ad63f7cfae8caa08
Related CCTV Guides
Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant