cctv

Can I record customers who browse but don't purchase, and what are my retention limits? UK Retail Shops and Stores CCTV rules explained 2026

Can I record customers who browse but don't purchase, and what are my retention limits? UK Retail Shops and Stores CCTV rules explained 2026

Can I record customers who browse but don't purchase, and what are my retention limits?

Under UK GDPR and the Data Protection Act 2018, your CCTV usage must be lawful, necessary, and proportionate. While you can record areas necessary for crime prevention (e.g., cash handling or high-value goods areas), the footage must not be excessive. Recording every customer who simply browses aisles may be deemed disproportionate unless there is a specific, verifiable risk (such as frequent theft in that specific zone). Regarding retention, you must only keep footage for as long as is strictly necessary for the purpose stated-generally, this is limited to 24 to 48 hours. After this period, the footage must be securely deleted, unless police or legal action requires otherwise, making data minimization a key legal requirement for any UK retail operation.

More questions about Retail Shops and Stores:

Can I record in staff break rooms or changing facilities?

Recording areas where employees have a reasonable expectation of privacy, such as break rooms or changing facilities, is generally illegal under UK law. Such monitoring constitutes an intrusion into private life and is highly likely to breach GDPR. If monitoring is absolutely necessary for a specific, high-risk operational purpose, you must obtain explicit, written employee consent and conduct a thorough proportionality assessment to satisfy the ICO.

Must I cover the public pavement immediately outside my store entrance?

While your property ends at the boundary line, if a public pavement is necessary to fully capture an incident (for example, if a theft occurs right at the entrance), you may need to cover it. However, the CCTV must only capture the absolute minimum area necessary. You must clearly notify the public that filming is taking place, ensuring your signage adheres to all local council guidelines regarding public space surveillance.

Simply recording video footage is usually compliant; recording audio conversations, however, is much more complex and raises significant privacy concerns. Generally, you must inform individuals that audio recording is taking place and obtain their explicit consent. Unless you have a specific legal exemption (e.g., suspected serious criminal activity), blanket audio recording is strongly discouraged and may violate UK privacy rights.

What do I need to do if I am part of a multi-tenant shopping centre?

In a multi-tenant environment, CCTV policy must be agreed upon and managed centrally, usually by the centre management or landlord. While you must comply with the overarching centre policy, you retain rights to monitor your specific trading area. Always ensure your signage acknowledges both the centre's policy and your own store's specific CCTV use, maintaining consistent legal notice across the premises.


For free CCTV surveys and expert compliance advice, call: 07830 638 337 For further resources, visit: https://github.com/gazpearce/gary-ai-assistant Full Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b58150ad63f7cfae8caa08


Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant