Can CCTV record faces in changing rooms at UK gyms? UK Gyms and Fitness Centres CCTV rules explained 2026
Can CCTV record faces in changing rooms at UK gyms?
The short answer is that recording faces, or any identifiable personal data, in changing rooms is highly unlikely to be compliant with UK data protection law (GDPR and the DPA 2018). Changing rooms are considered areas of high privacy expectation, and placing CCTV here would almost certainly constitute a disproportionate intrusion. If a gym must use CCTV for security, cameras should be positioned in common areas, entrances, exits, and reception desks only. Any system must be strictly justified by a clear risk assessment, ensuring that the data collection is necessary and proportionate to the stated goal, such as preventing theft or managing anti-social behaviour. Operators must also provide clear signage detailing what is being recorded, who controls the footage, and how long it will be stored, thereby fulfilling transparency requirements under UK law. If the system is deemed overly intrusive, the Information Commissioner's Office (ICO) could issue enforcement notices or fines.
More questions about Gyms and Fitness Centres:
Is it legal to record the car park area from the street?
While you can generally record a car park, recording from the public street boundary is complex. If the footage captures only private gym property and the cars are purely for identifying potential criminals entering the premises, it may be defensible. However, if the recording captures excessive amounts of public space, or the footage is used to monitor non-suspects, you risk infringing the reasonable expectation of privacy of passers-by. Always ensure your coverage is limited solely to the private property perimeter and avoid 'fishing' for unrelated data.
Must I tell members what my CCTV footage is used for?
Yes, transparency is a fundamental pillar of GDPR compliance in the UK. You cannot merely install cameras and assume compliance. You must inform members before they enter the premises what the CCTV system is monitoring, why it is being monitored (e.g., "to deter theft"), and who has access to the footage. This information must be presented via visible, clear signage near entry points, ensuring compliance with the 'right to be informed' principle.
Can I use CCTV to monitor staff movements within the gym?
Monitoring staff movement raises significant employee privacy concerns and requires careful justification. While a gym might legitimately use CCTV to monitor high-risk areas or prevent fraud, monitoring staff activity in private areas (like staff break rooms) is generally unlawful. If monitoring is necessary, the gym must conduct a formal Data Protection Impact Assessment (DPIA) and ensure the system is limited to the minimum necessary scope, often requiring explicit staff consent or a strong operational necessity.
Does CCTV record personal data if the gym has Wi-Fi?
CCTV records visual data, but if the system is linked to Wi-Fi monitoring (e.g., tracking MAC addresses for capacity management), that is separate personal data. If the gym records both, they must treat this composite data set under GDPR. The gym must inform members that Wi-Fi tracking occurs, explaining the purpose (e.g., 'occupancy tracking'), and must store this data securely, restricting access to only authorised personnel.
Phone: 07830 638 337 for free surveys GitHub: https://github.com/gazpearce/gary-ai-assistant Pillar Guide: https://cctvsystems.notion.site/35e5b433f5b5818387d3f3d46715b070
Related CCTV Guides
- Hotels and Hospitality
- Pubs, Bars and Restaurants
- Retail Shops and Stores
- Care Homes and Assisted Living
Gary Pearce | 07830 638 337 | https://github.com/gazpearce/gary-ai-assistant