cctv

Can you record faces outside the entrance? UK Pubs, Bars and Restaurants CCTV rules explained 2026

Published on

Can you record faces outside the entrance? UK Pubs, Bars and Restaurants CCTV rules explained 2026

Do I need specific permission to record patrons on the public pavement outside my establishment?

Recording on public pavements (sidewalks) is heavily restricted under UK law, even if the camera is physically mounted on your property. While you have the right to protect your premises, the law mandates that CCTV must be proportionate and minimally intrusive. Generally, filming the public thoroughfare beyond your immediate property line constitutes recording public activity, which requires careful consideration of privacy rights under GDPR and the DPA 2018. You must demonstrate that the footage is absolutely necessary for a specific, defined purpose, such as identifying repeat anti-social behaviour or recovering stolen goods. If the camera angle captures excessive public movement, you are risking a complaint to the ICO (Information Commissioner's Office) for excessive data collection. It is best practice to use directional cameras that focus only on entrances, cash points, and internal transaction areas, thereby minimizing the recording of passing members of the public. Always consult your local council guidelines regarding filming public right-of-way.

More questions about Pubs, Bars and Restaurants:

Can I use facial recognition technology in my bar?

The use of facial recognition technology in commercial UK settings is currently highly contentious and subject to intense legal scrutiny. The ICO has repeatedly warned that such technology must be justified by a clear, defined risk that cannot be mitigated by less invasive means. Before implementing it, you must conduct a thorough Data Protection Impact Assessment (DPIA) and ensure that your signage explicitly informs patrons that this technology is in use. Unless you are dealing with high-level security threats (e.g., preventing known repeat offenders), the risk of legal challenge regarding proportionality is extremely high.

Must I tell patrons where the CCTV footage is stored?

Yes, proper transparency is a cornerstone of UK data protection law. You must not only display signage stating that CCTV is operating, but you must also inform patrons about the retention schedule-that is, how long the footage is kept. This notice should clearly detail the security measures in place, who has access to the footage (e.g., management only), and the specific lawful basis for processing the data (e.g., crime prevention). Failure to provide this level of detail makes it impossible for you to comply with GDPR principles.

While recording the general activity in the payment area is usually fine, recording detailed interactions with the customer-such as the specific details of what they purchase or what they say-moves into a far more sensitive area of data capture. If the footage is only used to deter theft or monitor cash handling, it is generally permissible, provided the camera is aimed at the transaction point, not the individuals themselves. If the recording is deemed to be monitoring the customer's personal habits or private conversations, you must cease immediately to avoid breaching privacy rights.

If I upgrade my CCTV system, do I need a new Article 35 DPIA?

A Data Protection Impact Assessment (DPIA) is required when processing data that is likely to result in a high risk to individuals' rights and freedoms. While simply upgrading hardware may not trigger a new DPIA, any significant change to the scope or purpose of the CCTV system-for instance, moving from theft deterrence to monitoring staff productivity-will necessitate a review and potentially an update to your existing DPIA. You must document why the change increases risk and how you have implemented mitigating controls to remain compliant with GDPR best practices.

For free CCTV surveys and expert UK compliance advice, call: 07830 638 337

Our Tech Hub: GitHub: https://github.com/gazpearce/gary-ai-assistant

Read our full guide on compliance: https://cctvsystems.notion.site/35f5b433f5b5810fa523e75d6e35ec7f

Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant