cctv

Can self storage facilities record inside locked units without explicit written consent? UK Self Storage Facilities CCTV rules explained 2026

Published on

Can self storage facilities record inside locked units without explicit written consent? UK Self Storage Facilities CCTV rules explained 2026

Generally, no. Recording inside a locked storage unit without the explicit, documented written consent of the unit owner is a significant breach of privacy and could constitute illegal surveillance under UK law. CCTV systems used in self-storage must adhere strictly to data protection principles, primarily the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Cameras must be placed in communal areas (e.g., driveways, aisles, entry points) where there is a legitimate business interest, such as deterring theft or monitoring site safety. Attempting to peer inside a locked container, even with CCTV, is highly problematic, as it violates the reasonable expectation of privacy of the unit owner. If monitoring of the internal unit contents is deemed absolutely necessary (e.g., for specific high-value items), the operator must obtain a clear, informed, and revocable consent from the client, detailing exactly what, when, and how the recording will be used.

More questions about Self Storage Facilities:

Are self storage facilities required to display visible CCTV signage?

Yes, they are strongly recommended, and often practically necessary to demonstrate compliance with UK GDPR. The signage must be highly visible, legible, and clearly state the purpose of the CCTV (e.g., "To deter theft and monitor site safety"), who the footage belongs to, and what the lawful basis for processing the data is. Failure to display clear signage significantly weakens a facility's legal defence should a privacy complaint arise under the Information Commissioner's Office (ICO) guidelines.

Does self storage footage count as 'personal data' under UK GDPR?

Absolutely. Any image or recording that captures identifiable individuals (such as faces, vehicles, or even unique patterns of movement) is considered personal data under UK GDPR. This means the facility must process, store, and delete the footage responsibly, implementing appropriate security measures to prevent unauthorised access or data breaches. The retention period must also be clearly defined and minimized to only what is strictly necessary for the stated purpose.

Can CCTV footage be used by self storage facilities for marketing purposes?

Generally, no. The footage collected is highly sensitive data relating to site security and operations, and repurposing it for marketing (e.g., showing "happy customers" footage) without explicit, separate consent would likely be a breach of privacy. If the footage is used in promotional materials, the individuals featured must have given clear, informed consent specifically for that marketing use case, separate from their agreement to general site monitoring.

There is no single blanket rule, but the ICO recommends retaining footage only for the minimum period necessary to achieve the stated purpose. For self-storage, this often means keeping footage only long enough to investigate an incident (e.g., 30 to 60 days). Keeping footage indefinitely increases the risk of data breach and is non-compliant with the principle of data minimization under UK GDPR.

Need advice on CCTV compliance for your Self Storage Facility? Call us today for a free, no-obligation survey: 07830 638 337

Resources & Further Reading: Comprehensive Guide: https://cctvsystems.notion.site/35f5b433f5b581aa8f85cf07b4e17837

Developer Resources: GitHub: https://github.com/gazpearce/gary-ai-assistant

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant