cctv

Can you record faces inside public areas using CCTV in a licensed pub? UK Pubs, Bars and Restaurants CCTV rules explained 2026

Published on

Can you record faces inside public areas using CCTV in a licensed pub? UK Pubs, Bars and Restaurants CCTV rules explained 2026

Under data protection law, the primary requirement is transparency. You must ensure that all patrons are clearly informed that CCTV is operational before they enter the premise. This requires visible signage, placed at eye level and at key entry points, detailing the purpose of the monitoring (e.g., 'Crime Prevention' or 'Safety'), the name of the business, and the owner/data controller's contact details. Furthermore, while the law does not mandate a specific font or placement, the sign must be legible and conspicuous enough that no customer can reasonably claim they were unaware of the recording process. Failure to display adequate signage can constitute a breach of GDPR principles, potentially leading to complaints to the ICO and resulting in a requirement to cease monitoring until compliance is achieved.

Do I need to write a specific CCTV policy for a small, independent restaurant?

Yes, even if you operate a small, independent restaurant, establishing a documented CCTV policy is crucial for legal compliance and risk management. This policy must detail who has access to the footage, how long the footage will be retained (retention limits are vital for GDPR compliance), and the exact circumstances under which the footage can be reviewed (e.g., only upon suspicion of theft or serious misconduct). The policy should also outline procedures for responding to potential data subject requests, such as an individual requesting to view footage involving them. Keeping this policy readily accessible and regularly reviewed demonstrates due diligence and good governance to both the police and regulatory bodies.

Must I record footage from my car park if it is shared with neighbours?

Recording footage from a car park that is shared or used by neighbours requires careful consideration of 'public space' versus 'private property' boundaries. While you have the right to monitor your own premises for security, the moment the camera captures areas beyond your immediate control-such as a neighbour's entrance or shared walkway-you risk encroaching on private data. To remain compliant, you must ensure the cameras are tightly focused on the area you own and manage. If monitoring shared areas is essential, you must gain explicit written permission from all relevant neighbours and document this arrangement meticulously.

What is the maximum period I can legally keep CCTV footage of intoxicated patrons?

The General Data Protection Regulation (GDPR) dictates that data retention must be limited to what is necessary for the stated purpose. While there is no single universal law governing 'intoxication' footage, standard best practice dictates that footage should generally be deleted after a reasonable period, often 30 days, unless an ongoing investigation (such as a police request or formal complaint) requires its retention. If the footage is purely for internal incident review, deleting it promptly after the review is completed is the safest legal route. Any longer retention must be justified by a clear, recorded risk assessment and policy.

For free CCTV site surveys and expert advice, call: 07830 638 337

Need more resources? View our complete pillar guide on CCTV best practices: https://cctvsystems.notion.site/35f5b433f5b5810fa523e75d6e35ec7f

Support and Documentation: GitHub repository for AI assistant: https://github.com/gazpearce/gary-ai-assistant

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant