Your CCTV might help protect your business, but is it also recording the pavement, your neighbour’s doorway or conversations outside your premises?
For many businesses, cameras are a sensible security measure. They deter theft, protect staff and customers, and can provide valuable evidence for police. However, owning the camera does not mean you can record everything it captures.
Businesses using CCTV must comply with UK GDPR and the Data Protection Act 2018. Surveillance must have a clear purpose and be necessary and proportionate, particularly where cameras look beyond your boundaries.
Audio deserves extra care. Filming someone walking past your shop is one thing; recording their private conversation is quite another.
The domestic CCTV dispute in Fairhurst v Woodard [2021] highlighted the risks of excessive surveillance, including audio recording. Although not binding precedent, it offers a useful warning for businesses.
So, what should you check? Start with camera angles, clear signage, secure storage and sensible retention periods. Identify your lawful basis, usually legitimate interests, and have a process for responding to requests for footage and objections.
Sharing relevant recordings with police investigating crime can generally be lawful. Posting footage indiscriminately on social media is a different matter.
Considering facial recognition or other AI features? These bring additional privacy considerations.
The takeaway: protect your premises without overlooking other people’s privacy. A few straightforward checks can help keep your CCTV focused on security.