Is CCTV legal at home? UK rules on cameras, neighbours and data protection

Most people assume putting up a camera on their own home is entirely their own business, and for a lot of ordinary domestic setups, that's broadly correct. UK data protection law does not apply to a domestic CCTV system so long as it only ever captures images within the boundary of your own private property, including your garden. A camera covering your own front door, driveway or back garden, and nothing beyond that boundary, generally sits outside the scope of data protection rules altogether, which is why the vast majority of ordinary doorbell and driveway cameras never become a legal issue for the person who installed them.

Where this changes is the moment a camera's field of view extends beyond your own boundary — capturing a neighbour's garden or windows, a shared driveway or footpath, or a public street. At that point, data protection law does apply, and the person operating the camera takes on a specific set of responsibilities, regardless of how well-intentioned the installation was. This is a genuinely common trap: many domestic cameras aimed at a front door or driveway inevitably catch a slice of pavement, a neighbour's fence line, or a shared access path simply because of where the camera physically has to be mounted, and it's the coverage that matters here, not the intention behind installing it.

Once a system captures footage beyond your own boundary, several practical obligations follow. You should be able to explain why capturing those images is necessary — a reasonable justification such as deterring theft or recording deliveries generally covers most ordinary cases — and it's sensible to write that reasoning down so there's a clear answer ready if it's ever questioned. You should put up signage indicating that CCTV is in operation, keep any footage stored securely and accessible only to people who genuinely need to see it, and delete footage on a reasonably short schedule rather than keeping it indefinitely, whether that deletion happens automatically or you do it manually. You should also be prepared to respond appropriately if someone who appears in your footage — a neighbour, for instance — asks to see it or asks you to delete images of them, and where it's practical to do so, angling cameras away from a neighbour's property or a public area, or using a privacy mask over a specific section of the frame, is generally the easiest way to reduce how much of this applies to you in the first place.

The consequences of getting this wrong aren't merely theoretical. Failing to meet these obligations can lead to enforcement action from the Information Commissioner's Office (ICO), including a fine, and separately, an affected neighbour or passer-by can pursue a civil claim for compensation through the courts if they believe their privacy has genuinely been infringed. In practice, most disputes never reach that point — a straightforward conversation with a neighbour about repositioning a camera or adding a privacy mask resolves the large majority of complaints — but it's worth knowing the escalation path exists, and that the ICO can be brought in if a direct conversation doesn't resolve things.

Businesses face a noticeably higher bar than an ordinary household, because commercial CCTV is essentially never confined to a genuinely private boundary in the way a back-garden camera might be. Any business or organisation running CCTV must register the relevant details with the ICO and pay the applicable fee unless a specific exemption applies, and must display clear signage — in most cases at every entrance point — stating the purpose of the surveillance, such as crime prevention or staff and visitor safety, the name of the organisation operating it, and contact details or a reference to a fuller privacy notice where someone can find out more. If the system records audio as well as video, that needs to be stated on the signage too, since the ICO treats audio recording as more intrusive than video alone and expects it to be flagged clearly rather than left for someone to discover after the fact.

The practical takeaway for anyone installing or already running CCTV, whether at home or at a business premises, is to actually check the camera's real field of view rather than assuming it only covers what you intended it to. A quick review of the live feed, ideally at different times of day, quickly reveals whether a camera aimed at a front door is also sweeping across a shared path or a neighbour's window, and that five-minute check is generally all it takes to know whether the fuller set of data protection obligations applies to your setup or not.

Frequently asked questions