cctv

Can I record guests in the hotel lobby using CCTV without notifying them? UK Hotels and Hospitality CCTV rules explained 2026

Published on

Can I record guests in the hotel lobby using CCTV without notifying them? UK Hotels and Hospitality CCTV rules explained 2026

Can I record guests in the hotel lobby using CCTV without notifying them?

Under UK data protection law (specifically the GDPR and the DPA 2018), you must notify people if they are being recorded. Failure to display clear signage in the lobby is a significant compliance risk, as it violates the principle of transparency. Your signage must clearly state that CCTV is in operation, its purpose (e.g., security, crime prevention), and who the data controller is. Furthermore, the footage must be proportionate to the risk-you cannot use CCTV simply to observe general activity without a specific, lawful justification. If the cameras are only needed for common areas, restricting the capture to the minimum necessary area is best practice. Always ensure your internal policies outline exactly who has access to the footage and for what length of time.

More questions about Hotels and Hospitality:

Must I use CCTV to monitor staff movements and breaks in the hotel?

Monitoring staff requires a high degree of justification, as employees have specific rights under UK employment law. CCTV should only be used to monitor behaviour if there is a genuine and demonstrable risk of theft, misconduct, or safety hazard. If the purpose is merely productivity monitoring, this is usually deemed excessive and potentially unlawful. Always establish clear policies that staff acknowledge, detailing when and why they might be recorded, and ensure the monitoring is targeted, not constant.

Yes, monitoring car parks is common and generally lawful, provided the footage is strictly used for managing access, identifying vehicle theft, or managing incidents. However, you must ensure the cameras do not capture residential areas or private property that is outside your operational control. Signage is mandatory, stating the CCTV is for property security. You must also define a clear policy on how long vehicle footage is retained, as this data is highly sensitive.

While consent is not always a legal requirement for general public areas, the principle of 'best practice' dictates that you must consider the welfare of the child. If a child is involved in a dispute or an incident, parental consent may be required for processing their image. If the CCTV is solely for general security, the primary focus should be on the 'necessity' and 'proportionality' of the recording. Always document the necessity of the footage, especially when minors are involved, to demonstrate legal compliance.

How long can I keep CCTV footage of guests and staff?

Data retention is governed by the principle of 'storage limitation' under UK law. You must not keep footage longer than is absolutely necessary for the stated purpose. For standard security incidents, a retention period of 7 to 28 days is common, but this must be defined in your written policy. If the footage is only needed for an ongoing investigation, you must record the specific reason for the extension. Once the retention period expires, the data must be securely deleted or anonymised.

Need a comprehensive CCTV survey for your establishment? Phone: 07830 638 337 for free surveys

Resources & Guides: GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b581d5b5a2d9eff0969ab4

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant