CCTV Policy

CCTV Policy: Use Cameras Lawfully and Openly

A CCTV policy explains why your organisation uses CCTV, where the cameras are, how long footage is kept, who can view it, when it is shared with others such as the police, and how people can ask for footage of themselves. Robot Lawyer drafts the policy from your answers, for the law of the country or state you choose, and on the Verified plan a qualified legal professional checks it within 24 hours before you share it.

CONTENTS

What Is a CCTV Policy?

CCTV footage of identifiable people is personal data in many countries, so using cameras comes with legal responsibilities. A CCTV policy shows how you meet them: why the cameras are needed, how the system is run, how footage is kept secure and deleted, and how you deal with requests and complaints.

It also helps staff, visitors and customers understand how and why they may be recorded.

When Do You Need One?

• Offices and workplaces
  Cameras at entrances, car parks or reception areas.
• Shops, restaurants and venues
  CCTV for security and crime prevention.
• Warehouses and sites
  Monitoring stock, deliveries and safety.
• Schools, clinics and public buildings
  Where staff, pupils, patients or the public are recorded.
• New or upgraded systems
  Before installing cameras or changing what they cover.

What's Included in Your Policy?

• Policy details
  Your organisation's name and address, who to contact, who owns the policy, its effective date, version and next review date.
• Purposes
  Why you use CCTV, and that footage is used only for those purposes.
• Camera locations and signs
  Where cameras are, where they are never placed, and how people are told.
• Running the system
  Who manages it and how it is checked.
• Retention and security
  How long footage is kept and how it is protected.
• Access and disclosure
  Who can view footage, and when it is shared with the police or others.
• People's rights
  How to ask for footage and how to complain.
• Optional forms
  A footage request form, a disclosure log and an incident record, if you want them.

How It Works on Robot Lawyer

1. Answer the questions
   Tell us why you use CCTV, where the cameras are, how long you keep footage and who can see it.
2. Generate your policy
   We draft a clear policy for staff, visitors and the public.
3. Get it verified
   On the Verified plan, a qualified legal professional checks your policy within 24 hours and makes amendments where needed. The Essentials plan does not include this check. See how our documents are verified.
4. Put it in place
   Display clear signs, share the policy with staff and make it available to anyone who asks.

How It Works in Different Countries

• UK
  CCTV that records identifiable people must comply with the UK GDPR and the Data Protection Act 2018. You need a clear purpose, clear signs and a data protection impact assessment in many cases, and people can ask for footage of themselves.
• EU and Ireland
  The GDPR applies in a similar way, and national regulators publish CCTV guidance.
• United States
  Rules vary by state. Recording audio may need everyone's consent in some states, such as California, and cameras must never be placed where people expect privacy, such as restrooms.

These notes are general. Check the current rules where your cameras are.

CCTV Policy FAQs

Do we need signs for CCTV?

In most countries, yes. Signs should be clear and visible, and say who runs the system and how to contact them.

How long should we keep CCTV footage?

Only as long as you need it for your purposes. Many organisations keep footage for around 30 days unless it is needed for an incident. Your policy uses the period you choose.

Can people ask for a copy of footage of themselves?

Yes, in the UK and EU. You usually have one month to respond, and you may need to blur other people in the footage.

Can we use CCTV to monitor staff?

Only with care. Monitoring staff must be justified, proportionate and transparent, and staff should be told about it in advance.

Can I use this policy outside the UK?

Yes. Your policy is drafted under the law of the country or state you choose. Our lawyers are qualified in England and Wales and, on the Verified plan, check documents for good practice, clear formatting and the law of England and Wales. They are not qualified in other countries' law, so if your policy is governed by another country's law, we recommend having a local lawyer check it too.

Create a CCTV Policy

Use CCTV openly and lawfully. You can start with a 7-day free trial. See our pricing for the plans. Related documents: Privacy Policy, Data Retention Policy, Data Breach Policy and Data Protection Policy.