cctv

Can I record facial images of worshippers entering a place of worship? UK Churches and Places of Worship CCTV rules explained 2026

Published on

Can I record facial images of worshippers entering a place of worship? UK Churches and Places of Worship CCTV rules explained 2026

Can I record facial images of worshippers entering a place of worship? UK Churches and Places of Worship CCTV rules explained 2026

Recording facial images of worshippers must comply strictly with the Data Protection Act 2018 (DPA 2018) and GDPR principles. You must establish a clear legal basis for processing this biometric data, such as legitimate interests, which requires a robust Data Protection Impact Assessment (DPIA). Simply installing cameras at entry points is insufficient; you must demonstrate that the CCTV is proportionate and necessary for a specific, articulated purpose, like crime prevention. The ICO strongly advises that cameras should be focused on public areas, entrances, and exits, and should avoid capturing private interactions within the sanctuary itself. Furthermore, signage must be highly visible, informing people exactly what data is being collected, who the Data Controller is, and how long the footage will be retained. If the goal is purely religious monitoring, you must consult with both legal counsel and local authorities, as proportionality is key to compliance.

More questions about Churches and Places of Worship:

Must I notify the Diocese when installing CCTV in a church building?

While there is no specific statutory requirement to notify a Diocese, it is highly recommended due to potential historical or property restrictions. The Diocese's legal guidance often influences local parish practices, and non-compliance could affect insurance or future building alterations. It is best practice to check the specific property covenants and liaise with the church's parochial church council (PCC) to ensure local buy-in and avoid disputes.

Is CCTV monitoring for anti-theft purposes exempt from GDPR requirements?

No, monitoring for anti-theft purposes does not exempt you from GDPR. CCTV footage remains "personal data," and you must still adhere to principles like necessity, proportionality, and transparency. You must define a clear retention schedule and limit the scope of recording only to areas where theft is a genuine risk, rather than recording the entire premises.

Can I use facial recognition technology in a place of worship?

The use of facial recognition technology (FRT) is extremely high-risk and generally discouraged by the ICO for public space monitoring. It constitutes processing highly sensitive biometric data, requiring an extremely robust legal basis and an exceptional demonstration of necessity. Any implementation would require detailed consultation with police forces and specialized legal review to ensure full compliance with UK human rights law.

What are the rules regarding viewing CCTV footage by non-staff personnel?

Staff members viewing footage must only access what is strictly necessary for their defined role (e.g., security incident review). Strict access control protocols must be implemented, limiting viewing rights to authorized personnel only. All viewing activity must be logged, and staff must receive specific training on data handling and GDPR compliance before being granted access.

Need a comprehensive CCTV survey for your place of worship? Call 07830 638 337 for free surveys

Learn more about our compliance guides: https://cctvsystems.notion.site/35f5b433f5b5819f8a94f15e67ece564

Our GitHub Assistant: https://github.com/gazpearce/gary-ai-assistant

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant