Landlord & Tenant Guide to Home Security Cameras and Privacy Law (UK)

Key facts

  • Landlords installing CCTV in communal areas of a rented property are generally acting as data controllers under UK GDPR, not covered by the lighter domestic-use exemption.
  • The ICO recommends a maximum retention period of around 30 days for most residential CCTV footage.
  • Tenants can request a copy of footage showing themselves via a Subject Access Request, which landlords must normally fulfil within one month.
  • The Renters' Rights Bill introduces a new Landlord Redress Scheme, giving tenants a free, impartial route to dispute CCTV they consider overly intrusive.

This guide covers the position for both landlords installing cameras and tenants concerned about them. It complements our general UK covert recording law guide.

Why landlords aren't covered by the same exemption as homeowners

Ordinary homeowners get considerable latitude under UK GDPR's domestic-use exemption, provided a camera only captures their own property. Landlords don't get the same latitude the moment a camera covers anything beyond a single tenant's own private space. CCTV covering communal entrances, shared gardens, hallways, or parking areas used by multiple households puts the landlord (or managing agent, or freeholder) in the position of a data controller, with the fuller set of obligations that involves: a lawful basis for processing (typically "legitimate interests" under UK GDPR), clear signage, a defined retention period, and the ability to respond to tenant requests for their own data.

Landlords or agents operating CCTV across multiple properties may also need to register with the ICO as a data controller, at a modest annual cost.

What landlords are required to do

  • Have a genuine, proportionate reason for the camera, such as building security, not general monitoring of tenants' comings and goings
  • Display clear signage at the point of capture, stating that recording is taking place and who operates the system
  • Set a defined retention period. The ICO's general guidance points to around 30 days as a proportionate maximum for most residential CCTV, after which footage should be routinely deleted
  • Respond to Subject Access Requests. A tenant can request footage showing themselves, and a landlord must normally provide it within one month, at no charge
  • Never position cameras to capture the inside of a tenant's private space, including entrances specific to their unit that aren't genuinely shared

What tenants can do if they have concerns

  1. Check the tenancy agreement for any clause addressing CCTV or surveillance
  2. Raise it in writing with the landlord first, asking specifically what's recorded, why, and for how long footage is kept
  3. Submit a Subject Access Request if you want to see footage that includes you
  4. Complain to the ICO if the landlord doesn't respond adequately or the CCTV use appears disproportionate
  5. Use the new Landlord Redress Scheme, introduced under the Renters' Rights Bill, as a free, impartial dispute route specifically covering concerns like intrusive CCTV
  6. Apply to the First-tier Tribunal (Property Chamber) for more serious tenancy-related disputes, where relevant

A landlord installing a camera inside a tenant's private rented space without consent is a substantially more serious matter, potentially engaging both data protection law and, depending on placement, the voyeurism offences covered in our main legal guide.

A recent legal development worth knowing about

The Renters' Rights Bill introduces a Landlord Redress Scheme specifically designed to give tenants a free, impartial way to raise disputes about landlord conduct, including CCTV they consider overly intrusive, without needing to go straight to a tribunal or the ICO. It's a sign that landlord CCTV has become common enough, and contentious enough, to warrant its own dedicated dispute-resolution route, rather than being left to general data protection complaints alone.

Sources