Can you keep CCTV footage of a guest incident for more than 30 days? UK Hotels and Hospitality CCTV rules explained 2026
Understanding CCTV Retention Limits for Guest Incidents
When an incident occurs on hotel premises, the temptation may be to keep footage indefinitely, but UK data protection law, governed primarily by GDPR and the ICO, dictates strict retention schedules. You must adhere to the 'storage limitation' principle, meaning footage should only be kept for as long as absolutely necessary to achieve the purpose for which it was recorded. For most general incidents, 30 days is often considered a prudent limit, but this must be balanced against any pending police investigations or legal proceedings. If you believe the footage is crucial evidence, you must implement a formal retention policy and notify all relevant parties, including staff and guests, about this specific hold. Crucially, you must have a clear reason for extending retention beyond the initial period, logging this decision, and ensuring secure access. Failing to adhere to defined retention limits can result in serious fines and complaints to the Information Commissioner's Office (ICO).
More questions about Hotels and Hospitality:
Can we film areas where staff take breaks or eat?
The recording of staff in areas designated for breaks or meals is highly risky and generally violates the reasonable expectation of privacy. Unless there is an extremely specific safety hazard requiring monitoring, the CCTV system should be designed to exclude these zones entirely. Staff must be informed that these areas are private and that surveillance is not active. In almost all cases, monitoring staff break rooms constitutes disproportionate surveillance and could lead to a breach of employment law.
Is CCTV permissible near guest lockers and storage areas?
CCTV cameras should focus on high-risk ingress and egress points (like hallways and main entrances), but generally not within storage or locker rooms. If the cameras overlook these areas, they must be positioned only to monitor unauthorized entry into the room or area, not the activities within it. Employees must be trained to ensure that the camera angle does not intrude into the private space, limiting coverage strictly to public thoroughfares.
Do we need to film the reception desk and checkout counter?
Yes, filming the reception and checkout counter is standard practice and usually justifiable for security, theft prevention, and verifying service procedures. However, the scope must be limited to the transaction area and the public-facing desk itself. You must not use this footage to monitor the private conversation between the guest and the front desk staff, keeping the monitoring purpose focused purely on asset protection and operational security.
Is it sufficient to just place 'CCTV in use' signs?
While clear, visible signage is mandatory, it is not sufficient on its own to ensure compliance. The signage must clearly state the purpose of the CCTV (e.g., "To prevent theft and ensure guest safety"), the contact details of the Data Protection Officer, and the retention period (or how long footage is kept). Failing to provide this detail could lead the ICO to deem the system non-compliant from the outset.
For comprehensive guidance on upgrading your hotel's security infrastructure, call us for free surveys today.
Phone: 07830 638 337
For more technical details, visit our GitHub: https://github.com/gazpearce/gary-ai-assistant
View our full guide on CCTV systems and compliance: https://cctvsystems.notion.site/35e5b433f5b581d5b5a2d9eff0969ab4
Related CCTV Guides
Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant