cctv

Can you film staff in changing rooms using CCTV? UK Offices and Commercial Buildings CCTV rules explained 2026

Published on

Can you film staff in changing rooms using CCTV? UK Offices and Commercial Buildings CCTV rules explained 2026

Can you film staff in changing rooms using CCTV? UK Offices and Commercial Buildings CCTV rules explained 2026

Under UK data protection law, the answer is a definitive no; filming staff in changing rooms, or any area considered private or highly personal (such as restrooms or dressing areas), is illegal and constitutes a severe breach of privacy rights. Such surveillance is almost certainly disproportionate, violates the principle of data minimisation, and would fail any test of legitimate interest required by the Data Protection Act 2018 (DPA 2018). You must ensure that any CCTV system is strictly limited to common areas, entrances, exits, and high-risk points of entry, and must never capture areas where employees have a reasonable expectation of privacy. Furthermore, the ICO guidance emphasizes that signage must clearly inform people when and where they are being recorded, and staff must be consulted extensively before any system is implemented to maintain transparency and trust. Any system design must be reviewed by a qualified data protection officer to ensure compliance, as misuse can lead to substantial fines and civil action.

More questions about Offices and Commercial Buildings:

Must CCTV cover all areas of the parking lot?

No, comprehensive coverage of the entire parking lot is usually excessive and breaches data minimisation principles. Instead, the focus should be on high-risk areas such as vehicle entry/exit points, known vandalism spots, or areas where valuable goods are stored. You must clearly demonstrate that the targeted coverage is necessary to prevent a specific, demonstrable threat, and that less intrusive methods (like visible deterrent signage) have been considered and failed.

Does CCTV need to record faces or just capture general activity?

Generally, recording faces is only necessary if the purpose of the surveillance is specifically to identify individuals for legal reasons, such as identifying a shoplifter or a trespasser. If the goal is merely to monitor general activity, such as determining foot traffic patterns for security planning, you should configure the system to capture general activity and body movements without focusing on facial recognition, thereby limiting the sensitive personal data collected.

How long can CCTV footage be kept under UK law?

The Data Protection Act 2018 dictates that you must not retain personal data for longer than is necessary for the purpose for which it was collected. For typical commercial security purposes, footage should usually be deleted within 24 to 72 hours. If the footage is needed for an active police investigation or ongoing insurance claim, the retention period must be formally documented and justified to all affected parties.

Generally, no. Placing cameras aimed at, or capable of capturing, the interior of private office cubicles or workstations is highly likely to be seen as an excessive intrusion into the employee's private working space and reasonable expectation of privacy. If monitoring staff behaviour is necessary, it must be done through transparent policies (e.g., clear guidelines on data use) and must be narrowly scoped to common areas, not individual workspaces.

For free CCTV surveys and expert advice on compliance, call us today: Phone: 07830 638 337

Learn more about our services: [Pillar Guide: https://cctvsystems.notion.site/35f5b433f5b581808431f658b5d46d99]

Need technical support or resources? GitHub: https://github.com/gazpearce/gary-ai-assistant

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant