Can I Record My Staff on CCTV?

October 31, 2025

Data Protection & Privacy , News

As an employer, recording your staff on CCTV and getting it wrong can lead to serious breaches of privacy laws and potential claims against your business. This guide will help explain when CCTV is suitable, the laws around it and if it can be used as evidence in the workplace.

What Are the Laws on CCTV Cameras in the Workplace?

Installing CCTV in the workplace can protect your business, but it must be done in-line with UK data protection and privacy laws.

Data Protection Act 2018

This is a national law that governs how organisations must collect, handle and store personal data to protect people’s privacy. This has replaced the Data Protection Act 1998 and works alongside the UK GDPR.

Human Rights Act 1998

This is a key piece of UK legislation that protects the fundamental rights and freedoms of individuals. It ensures that everyone in the UK is treated with fairness, dignity, and respect.

The Regulation of Investigatory Powers Act 2000 & 2016

These two key pieces of UK legislation are important. These laws regulate how private communications can be intercepted, monitored and recorded by public authorities.

Telecommunications Regulations 2000

This UK law sets out when and how employers can monitor or intercept electronic communications in the workplace.

What Are the GDPR Rules Regarding CCTV?

The General Data Protection Regulation (GDPR) is a regulation in the EU and UK law that concerns the processing, movement and sharing of personal data. It applies to any business, big or small, that processes personal data of individuals. Employers must be transparent, justify the use and protect the rights and privacy of employees on camera.

Lawful Basis

You must have a legal reason to use CCTV such as legitimate interests or legal obligation. You are not allowed to record staff without a clear justification.

Transparency & Accountability

CCTV must be transparent, as employees and visitors must know when they are being recorded. This can be done through visible signage and privacy notices.

Purpose Limitation

You can only use the footage for the purpose you stated it was being collected for. It cannot be used later for unrelated purposes.

Data Minimisation

Only the minimum necessary footage should be captured and shouldn’t be where people expect privacy.

Storage Limitation

CCTV footage should only be retained for as long as necessary to fulfil the purpose for which it was collected. The retention period should be clearly set out in the company CCTV policy.

Security & Access Control

Footage must be stored securely, along with passwords to add protection and prevent unauthorised access.

Accountability & Documentation

Businesses must keep records of how CCTV data is processed, along with carrying out a Data Protection Impact Assessment (DPIA).

A DPIA is a process designed to help you systematically analyse, identify and minimise the data protection risks associated with the processing of personal data

Are You Allowed to Record Staff at Work?

Yes, you are allowed to record staff at work but under strict guidelines. When it comes to CCTV, you must be able to justify monitoring staff at work. There must be a legitimate reason, employees must be informed, and it must be in-line with the information above to ensure employees privacy rights under GDPR, and the Human Rights Act are protected.

Can CCTV Be Used as Evidence in the Workplace?

CCTV footage can be used as evidence in the workplace for disciplinary actions, providing it has been obtained lawfully and in-line with data protection regulations.

If you’re looking for extra support for your team or with your workplace surveillance policy, Premier Legal can help. Get in touch for some expert assistance today.