cctv

Can I film patients waiting in the reception area without explicit consent? UK Dental and Medical Practices CCTV rules explained 2026

Published on

Can I film patients waiting in the reception area without explicit consent? UK Dental and Medical Practices CCTV rules explained 2026

Monitoring patient waiting areas with CCTV is a highly sensitive operation governed strictly by UK data protection law (GDPR) and the Data Protection Act 2017. While CCTV is often used for security purposes, recording individuals in public-facing areas like reception requires a clear lawful basis, which usually means proving a significant risk (e.g., theft, anti-social behaviour). Simply monitoring for 'safety' is often insufficient if it infringes on the expectation of privacy. Before deploying cameras, you must conduct a rigorous Data Protection Impact Assessment (DPIA) and ensure all signage is highly visible, informing patients exactly what is being recorded and why. Furthermore, if the footage is used to monitor interactions, the ICO advises that recording conversations without explicit, informed consent from all parties is highly problematic, particularly in a therapeutic setting. You must also ensure staff are trained on strict data handling protocols, limiting access to footage only to those who genuinely require it for investigation.

More questions about Dental and Medical Practices:

Is recording staff in the back office considered employee monitoring?

Yes, CCTV monitoring of staff working areas (like back offices or treatment rooms) is classified as employee monitoring and is subject to specific employment law considerations. While an employer has a right to monitor for security or performance, staff must be fully informed and consulted about the system's deployment. You must clearly define the scope of monitoring (e.g., only entry/exit, not activity within the room) and ensure the cameras are proportionate to the risk, adhering to best practice guidance from the ICO.

Must I inform patients that the CCTV is recording conversations?

No, you do not need to inform patients that the CCTV is recording conversations specifically, but you must inform them that the area is covered by CCTV and that recordings are made for security purposes. The focus must be on the recording of images and data. Attempting to use video footage to review private or confidential conversations (e.g., diagnosis discussions) can be a severe breach of patient confidentiality and GDPR principles.

CCTV records visual evidence in a specific physical location, requiring visible cameras and recording hardware. Bluetooth tracking, however, involves monitoring the movement or presence of devices (like keys or phones) within a much wider or less visible range. Deploying Bluetooth trackers requires even higher levels of transparency and consent, as the data collected can reveal extremely intimate patterns of movement, raising significant privacy concerns under UK law.

Can I store CCTV footage indefinitely if a theft occurs?

No, you must adhere to the principle of data minimisation, meaning footage should only be kept for as long as is absolutely necessary for the stated purpose. For general security incidents, the ICO typically advises retention periods of no more than 30 days, unless the footage is required for a specific legal investigation or police request. Keeping footage indefinitely increases liability and the risk of accidental data breaches.

For free CCTV surveys and consultation, call: 07830 638 337

GitHub: https://github.com/gazpearce/gary-ai-assistant

Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b581919f1ff69c173ea5da

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant