cctv

Can I record faces in a UK retail shop CCTV? UK Retail Shops and Stores CCTV rules explained 2026

Published on

Can I record faces in a UK retail shop CCTV? UK Retail Shops and Stores CCTV rules explained 2026

The primary legal basis for recording customer faces is usually legitimate interest, specifically for crime prevention, loss mitigation, and ensuring staff safety. However, the ICO guidance stresses that recording faces must be necessary, proportionate, and clearly justified. You must implement clear signage detailing what is recorded, why, and how long the data is kept, fulfilling the transparency requirement of GDPR. Recording faces should be limited to areas where a genuine risk of theft or serious misconduct exists, rather than blanket coverage. If the goal is merely general monitoring, considering non-facial recognition methods (like general area coverage) is advisable to minimize data processing risk. Furthermore, if you use facial recognition technology, you must ensure it is a Data Protection Impact Assessment (DPIA) compliant system, as this is considered high-risk processing. Always consult the ICO guidance before deploying advanced biometric surveillance systems.

More questions about Retail Shops and Stores:

Must I display CCTV signage in every department of my store?

Yes, signage is mandatory for compliance and transparency. The signs must be highly visible, placed at entry points, and clearly state that CCTV is in operation. They must also explain the purpose of the surveillance (e.g., "to prevent crime and loss") and provide details on who the footage will be viewed by. While you do not need a sign for every single shelf, any area where surveillance is activated or where staff are stationed should be covered by clear notification. Failure to provide adequate signage constitutes a breach of the GDPR's transparency principles.

Can I use CCTV footage to fire an employee or customer?

CCTV footage is powerful evidence, but it cannot be the sole basis for disciplinary action. If you intend to use footage against an employee, you must follow strict internal disciplinary procedures and ideally seek HR advice. For customers, evidence must be used proportionally; the footage should only support the claim of theft or misconduct, not simply record the person's presence. Before using footage in legal proceedings, ensure it has been stored securely and that its retention period has not expired, maintaining the integrity of the evidence.

No, generally it is not legal unless there is a specific, justifiable reason related to criminal activity (e.g., identifying a theft attempt). Staff break areas are considered private spaces, and monitoring them constitutes an unwarranted intrusion into their private lives. If monitoring is absolutely necessary, the employee must be explicitly informed beforehand, and the monitoring should be limited only to entry/exit points, not the break area itself. Always prioritize privacy rights over monitoring convenience in staff areas.

How long can I keep CCTV footage of shop incidents in the UK?

The ICO recommends that footage retention periods be kept to the absolute minimum necessary for the stated purpose. For general crime prevention, 24 to 48 hours is often considered adequate, allowing time for police investigation if required. If the footage is part of an active police investigation, you must follow the specific instructions given by law enforcement. Once the defined purpose is fulfilled, the footage must be deleted promptly and securely, adhering strictly to your documented data retention policy.

Phone: 07830 638 337 for free surveys

GitHub: https://github.com/gazpearce/gary-ai-assistant

Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b58150ad63f7cfae8caa08

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant