Can recording video of workers and subcontractors on UK construction sites count as processing personal data under GDPR? UK Construction Sites CCTV rules explained 2026
Can recording video of workers and subcontractors on UK construction sites count as processing personal data under GDPR? UK Construction Sites CCTV rules explained 2026
Yes, absolutely. Under UK data protection law, video recording of identifiable individuals, such as workers or subcontractors, constitutes processing personal data under the GDPR framework. This means that before you install any CCTV, you must establish a clear legal basis for the recording, such as legitimate interests (e.g., site safety or crime prevention). You must also ensure the recording is necessary, proportionate, and managed according to the Data Protection Act 2018. Furthermore, the signage must be prominent, informing all workers and visitors exactly what data is being collected, why, and for how long it will be retained. Failure to comply with these guidelines could lead to significant fines from the ICO (Information Commissioner's Office). Consider implementing specific procedures, such as limiting cameras only to high-risk areas and anonymising footage where possible, to minimise privacy intrusion.
More questions about Construction Sites:
Must construction site CCTV comply with health and safety regulations (e.g., CDM 2015)?
While CCTV itself is a security measure, its implementation must be considered within the scope of overall Health and Safety Executive (HSE) compliance, particularly when considering the Construction (Design and Management) Regulations 2015 (CDM). If the CCTV is intended to monitor high-risk activities or enforce safe working practices, the site's Method Statement and Risk Assessment must explicitly address the use of surveillance. The cameras must not create tripping hazards or obstruct safety equipment, ensuring that the monitoring system itself complies with physical site safety standards.
Is signage adequate if the site is restricted to members of staff only?
Even if a site is restricted and access is limited to employees, robust signage remains a legal requirement under GDPR and general best practice. The sign must not only warn of the CCTV presence but must also detail the scope of the monitoring (e.g., "footage reviewed for theft and safety compliance") and provide a clear point of contact for the Data Protection Officer. Relying solely on visitor sign-in sheets is insufficient; the visible warning is crucial for demonstrating transparency to both staff and any authorized personnel.
Do we need explicit written consent from every worker whose face is filmed?
While obtaining explicit written consent for every worker can be impractical on a large site, relying on consent alone is usually not the strongest legal basis. Instead, organisations typically rely on 'legitimate interests'-the interest of the company in maintaining safety and order. However, you must still conduct a comprehensive Data Protection Impact Assessment (DPIA) to prove that your use of the camera is proportionate and doesn't unfairly override the employees' reasonable expectation of privacy.
Can CCTV be used to monitor worker productivity or performance?
Using CCTV purely for performance monitoring or discipline is extremely high-risk under UK law and is generally discouraged. Such monitoring is often viewed by the courts and the ICO as a gross intrusion into private life and could breach worker rights. If performance is a concern, the system must be designed and implemented with the explicit goal of safety or asset protection, not behavioural control. Any performance review based on CCTV footage should always be accompanied by clear disciplinary policy and worker consultation.
Need to review your site's surveillance setup?
Call us today for a free survey: 07830 638 337
More information and resources:
GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b581f8a63bc933322c0d49
Related CCTV Guides
Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant