cctv

Can you film a patient's waiting room without explicit consent? UK Dental and Medical Practices CCTV rules explained 2026

Published on

Can you film a patient's waiting room without explicit consent? UK Dental and Medical Practices CCTV rules explained 2026

Must I inform patients about CCTV cameras in the waiting area if they are waiting for sensitive consultations?

Yes, comprehensive transparency is mandatory under GDPR and the Data Protection Act 2018. While you do not need explicit patient consent to film common areas, you must implement clear and visible signage detailing that CCTV is operational, outlining the scope of recording, and stating the purpose (e.g., safety and security). Furthermore, while the waiting room is a public area, the expectation of privacy remains high in a medical setting, necessitating signage that is prominently placed but unobtrusive. If the cameras are placed in areas where patients may be engaged in private discussions, you must ensure that recording does not inadvertently capture sensitive personal data (SPD) or overheard conversations, which would constitute a breach of privacy. Consulting the ICO guidelines is crucial to ensure your signage is compliant and easily understood by all visitors.

More questions about Dental and Medical Practices:

Recording staff-only areas, such as changing rooms or private staff corridors, is extremely restricted and requires the highest level of justification. Generally, CCTV in these areas is only permissible if it is demonstrably necessary for security (e.g., preventing theft of high-value medical equipment) and if the coverage is strictly limited to entrances and exits. Recording areas where staff have a reasonable expectation of privacy, such as changing rooms, is usually illegal and constitutes a serious breach of employment law and GDPR.

Can I use CCTV footage to monitor staff performance or behaviour?

Using CCTV footage solely for performance management or monitoring staff behaviour is legally risky and highly discouraged. CCTV systems are primarily for safety and security purposes. If you intend to monitor performance, you must have robust policies in place, clearly communicated to all staff, and the monitoring must be proportionate to the risk. Employers should favour non-intrusive methods of supervision and only use footage as a last resort following an incident, ensuring strict data retention policies are followed.

Do I need separate signage if I have different types of cameras (e.g., entrances vs. internal corridors)?

Yes, best practice and legal compliance dictate that signage should be specific and comprehensive. While a main sign covering the premises is necessary, if you have separate security objectives or different levels of public access (e.g., a dedicated entrance CCTV feed versus a public corridor feed), the sign should ideally reflect this segmentation. The signage must inform the public exactly what is being recorded, why, and who the data controller is, preventing any ambiguity regarding the scope of the surveillance.

While car park CCTV is standard for premises security, merely filming the car park may not be sufficient if your premises are deemed high-risk. You must conduct a thorough risk assessment to determine if internal areas, such as main access points or specific equipment storage rooms, also require coverage. The footage must be proportionate to the risk, meaning if the risk is theft, the camera placement must focus on points of access and vulnerability, not just general movement.

Need a free CCTV survey for your medical practice? Call 07830 638 337

Our Digital Resources: GitHub: https://github.com/gazpearce/gary-ai-assistant

View our comprehensive guide to compliance: Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b581919f1ff69c173ea5da

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant