Key facts
- Buying and owning spy cameras, voice recorders and detectors is legal in the UK. The law is concerned with how you use them.
- There's no general offence of recording a conversation you're part of. The UK isn't an "all-party consent" country like some US states.
- Recording someone doing a private act without consent can be voyeurism, punishable by up to two years in prison. "Upskirting" became a specific offence in England and Wales in 2019.
- Domestic CCTV and doorbell cameras fall outside data protection law only if they capture nothing beyond your own property boundary.
- A Ring doorbell owner was ordered to pay his neighbour £100,000 in damages after a court found his cameras breached data protection law and her privacy.
- The ICO's guidance on monitoring workers covers a nanny or gardener you employ in your own home, not just office staff.
This is general legal information, not legal advice. If you're facing a specific situation, speak to a solicitor.
In this guide
- Is it legal to buy and own spy devices in the UK?
- Recording conversations in the UK
- Phone call recording
- Domestic CCTV and doorbell cameras
- Hidden cameras inside your own home
- Hidden cameras and voyeurism law
- Nanny cams and household staff
- Workplace monitoring by employers
- Landlords, tenants and rental property
- GPS trackers
- Penalties and real cases
- FAQs
- How to cite this page
Is it legal to buy and own spy devices in the UK?
Yes. It is legal to buy, sell and own hidden cameras, voice recorders, listening devices, GPS trackers and bug detectors in the UK. There is no general ban on owning any of these products.
What the law controls is use. The same camera can be perfectly lawful pointed at your own front door and a criminal offence hidden in a bathroom. As the sections below show, the questions that matter are:
- Who is being recorded, and do they know?
- Where is the device, and would people there reasonably expect privacy?
- Does it record audio as well as video?
- What happens to the recordings, and who sees them?
If you're comparing spy cameras or listening devices, the legal risk depends far more on how you use the product than on the product itself.
Recording conversations in the UK
If you're a party to a conversation, you can lawfully record it, even without telling the other person. This surprises a lot of people, because the UK is sometimes wrongly assumed to work like US "all-party consent" states such as California. It doesn't.
The criminal offence to be aware of is interception. Section 3 of the Investigatory Powers Act 2016 makes it an offence to intercept a communication in the course of its transmission without lawful authority. It replaced the old interception offence in section 1 of the Regulation of Investigatory Powers Act 2000 (RIPA) in June 2018. The Act defines interception as making the content of a communication available to someone who is not the sender or intended recipient, so recording a conversation or call you're part of falls outside it.
What you can do:
- Record a conversation, call or meeting you're personally part of, without telling the other person
- Keep that recording for your own personal use
Where it gets risky:
- Recording a conversation between other people that you're not part of
- Sharing or publishing a recording of someone without their consent. This can trigger a UK GDPR/data protection issue even if the original recording was lawful
- Using a recording obtained in a way that breaches someone's Article 8 right to a private life (Human Rights Act 1998). A court can exclude such evidence, even if no criminal offence was committed in making it
A lawfully made recording can often be used as evidence, including in an employment tribunal or family court, though a judge retains discretion to exclude it depending on how it was obtained and used. Our guide to recording conversations legally in the UK covers phone calls, recording at work and using recordings in court in more detail.
Phone call recording
The same party-to-the-call principle applies to phone calls. If you're one of the people on the call, you can legally record it for personal use. Some phones announce recording automatically: iPhone call recording plays a message to everyone on the call.
Businesses work under a different, more specific set of rules. Under the Investigatory Powers Act 2016 and the Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018, which took over from the older Telecommunications (Lawful Business Practice) Regulations 2000, a business can record calls on its own systems without asking permission each time, but only for set purposes, such as establishing facts, checking standards or compliance, or preventing crime. It must make all reasonable efforts to tell people using the system that calls may be recorded. This is the legal basis behind the familiar "this call may be recorded for training purposes" announcement.
What a business can't do is record calls for purposes outside those categories, or use recordings in ways unconnected to the stated purpose, without meeting UK GDPR's general rules on lawful processing.
Sharing a call recording with a third party is where personal, lawful recording most often turns into a legal problem. The recording itself may be fine, but distributing it is a separate act that engages data protection law.
Domestic CCTV and doorbell cameras
The ICO's rule for home CCTV and video doorbells is a boundary test. If your system only captures your own property (front door, driveway, garden), UK GDPR and the Data Protection Act simply don't apply to you. Step outside that boundary and they do.
Once a camera picks up a neighbour's garden, a shared path or the pavement, you become a data controller for anyone captured outside your boundary. That brings real obligations: you're responsible for how the footage is used and stored, you need to be able to respond if someone asks what data you hold on them, and you can't keep footage longer than necessary.
The ICO recommends thinking through, before you install anything:
- Why you actually need the camera, and whether a non-recording option (better lighting, for instance) would do the job
- Exactly what area you want it to cover
- Whether it needs to record audio at all. Audio pickup is easy to overlook and often the least necessary part of a setup
- How your neighbours are likely to feel about it, and whether telling them in advance, or putting up a visible notice, is worth doing
A widely reported 2021 case, Fairhurst v Woodard, illustrates the stakes: a homeowner's Ring doorbell and cameras, which picked up audio and video beyond his own boundary, led a court to find he had breached data protection law and harassed his neighbour, and she was awarded £100,000 in damages.
If a neighbour's camera is pointed at your property and you're not satisfied by talking to them directly, the ICO handles data protection complaints of this kind.
Hidden cameras inside your own home
Inside your own home, for your own household's security, a hidden camera is usually lawful. Most people use them to see who comes and goes, to check on deliveries or tradespeople, or to find out what happened after a theft or damage.
Generally fine: entrances, hallways, living rooms, kitchens and other shared areas, with the camera aimed only at the area you're concerned about.
Not acceptable: bathrooms, changing areas and guest bedrooms, or anywhere else a visitor would reasonably expect privacy. Recording there can move from a privacy problem into the criminal offences covered in the next section.
Three habits keep a home setup on safe ground:
- Keep the view inside your boundary. Once a camera captures a neighbour's garden, a shared corridor or the street, data protection rules start to apply, as explained above.
- Switch audio off unless you really need it. Audio captures private conversations and is treated as more intrusive than video, so video-only is the lower-risk choice for most homes.
- Keep footage for a short, set period. Many homeowners overwrite recordings after 7 to 30 days unless something has happened, and keep access to the footage restricted.
If the camera will regularly record someone who works in your home, such as a nanny, cleaner or carer, read the nanny cams section below: the rules are stricter than for ordinary home security. For placement ideas, see our guide to safe placement of hidden cameras in UK homes.
Hidden cameras and voyeurism law
Where a hidden camera is used to observe or record someone in a place they'd reasonably expect privacy, such as a bathroom, bedroom or changing room, the law moves from data protection into criminal territory.
Section 67 of the Sexual Offences Act 2003 makes it an offence in England and Wales to observe, or operate equipment to record, someone doing a private act, without their consent, for sexual gratification. This covers installing a hidden camera as much as physically watching. Scotland and Northern Ireland have similar voyeurism offences.
The Voyeurism (Offences) Act 2019 added a further, specific offence commonly known as "upskirting": recording or attempting to record under someone's clothing without consent, whether the purpose is sexual gratification or to cause humiliation, alarm or distress. Unlike the general voyeurism offence, this one doesn't require the victim to be somewhere private; it can happen on a train, in a street, anywhere. Both offences carry a maximum sentence of two years' imprisonment, and the more serious sexual cases can result in inclusion on the sex offenders register.
The important distinction throughout this guide is purpose and location: a spy camera used for home security, pointed at your own front door, sits in a completely different legal category to equipment placed to observe someone in a private space without their knowledge.
Nanny cams and household staff
Most general advice on nanny cams treats them as a special case of ordinary domestic CCTV: install it in your own home, and you're broadly in the clear. That's only half the picture.
The ICO's guidance on monitoring workers is explicit that it applies to a visiting worker in your household, such as a nanny or a gardener, whose activity you monitor routinely or on an ongoing basis, not just to office employers and their staff. In other words, if your nanny cam is running continuously to keep an eye on how your nanny does her job, you may be acting as an employer monitoring a worker, not simply a homeowner with a security camera, and the same standards as workplace monitoring can apply.
That matters because the ICO's position on covert monitoring of workers is strict: it's rarely justifiable, and is really only defensible in exceptional circumstances, such as suspected criminal activity or serious misconduct, rather than as routine, ongoing surveillance. Video-only monitoring used transparently, with the nanny aware of it, sits on much safer ground than a hidden camera run covertly and indefinitely.
Practical takeaways:
- Video recording, with the caregiver informed in advance, is the lowest-risk setup
- Audio recording is more sensitive under data protection principles and is best avoided unless there's a specific reason for it
- Camera placement should exclude private areas (bathrooms, the nanny's own space if live-in)
- Purely covert, ongoing recording without any disclosure is the configuration most likely to raise a genuine legal problem, particularly if used routinely rather than in response to a specific, documented concern
- If there's a nanny share involving another family, their awareness matters too, not just yours
Our nanny cam UK guide covers choosing and placing a nanny cam in more detail.
Workplace monitoring by employers
Employers are allowed to monitor staff: CCTV, email, internet use, keystroke logging and more all have legitimate uses. But UK GDPR and the Data Protection Act 2018 require that monitoring be lawful, fair and proportionate, and the ICO's October 2023 guidance sets out what that means in practice.
The baseline expectation is transparency: workers should know monitoring is happening, understand why, and be told before it starts, except in genuinely exceptional circumstances. Employers are also expected to pick the least intrusive method that achieves their purpose, and to complete a Data Protection Impact Assessment (DPIA) for higher-risk monitoring such as covert surveillance.
Covert monitoring specifically is treated as the exception, not a normal tool. The ICO says it should only be authorised by senior management, follow a documented DPIA, and be strictly time-limited to investigating a specific, reasonably suspected issue, with criminal activity or serious misconduct being the clearest examples. Covert audio or video monitoring in spaces where staff would reasonably expect privacy, such as toilets or changing rooms, is treated as essentially never justifiable.
Two European Court of Human Rights cases underpin the legal backdrop here: Copland v United Kingdom (2007), which found that monitoring an employee's phone, email and internet use without telling them breached their Article 8 right to privacy, and Barbulescu v Romania (2017), which reinforced that employees retain some reasonable expectation of privacy at work.
Getting this wrong carries real consequences beyond an ICO fine: employees who feel unfairly or excessively monitored can bring claims for constructive dismissal, breach of the implied duty of trust and confidence, or in some cases discrimination. Our employer's guide to workplace monitoring has a checklist.
Landlords, tenants and rental property
The same domestic-boundary principle that governs homeowner CCTV applies to landlords, but with an added complication: a rented property often has shared or communal areas (a shared hallway, stairwell or parking area) that fall outside anyone's individual "domestic" boundary.
A camera covering only the interior of a self-contained let, controlled by the tenant themselves, is treated like any other domestic camera. But a landlord installing cameras that cover communal entrances, shared gardens or hallways used by multiple households is generally acting as a data controller for that footage, with the same UK GDPR obligations that apply to a business, not the lighter domestic exemption.
Good practice for landlords covering shared areas includes:
- Clear signage that recording is taking place
- A defined, documented reason for the camera (security, deterring break-ins) rather than general monitoring of tenants
- A retention period, after which footage is deleted
- Not positioning cameras to capture the interior of any individual tenant's private space
A landlord installing a camera inside a tenant's private rented space without the tenant's knowledge sits in far more serious territory, potentially engaging both data protection law and, depending on where the camera is placed, the voyeurism offences covered above. Our landlord and tenant guide goes into more detail.
GPS trackers
Fitting a GPS tracker to your own car, bike, bag or other property is lawful, and it's one of the most common uses for a tracker. Tracking a vehicle you own that a family member drives is usually fine if they know about it.
Tracking another person without their knowledge is different. Secretly tracking someone's car or belongings to follow their movements can form part of a course of conduct amounting to harassment or stalking under the Protection from Harassment Act 1997, and businesses tracking staff vehicles need to follow the ICO's monitoring rules and tell staff. If you think you're being tracked, our guide to finding a listening device in your car covers how to check a vehicle.
Penalties and real cases
| Situation | Relevant law | Maximum penalty / outcome |
|---|---|---|
| Recording your own conversation or call | Investigatory Powers Act 2016, ss.3–4 | Not an offence: no penalty |
| Unlawfully intercepting others' calls or messages | Investigatory Powers Act 2016, s.3 | Up to 2 years' imprisonment and/or a fine |
| Voyeurism (observing/recording a private act without consent) | Sexual Offences Act 2003 s.67 | Up to 2 years' imprisonment |
| Upskirting | Voyeurism (Offences) Act 2019 | Up to 2 years' imprisonment; possible sex offenders register |
| Domestic CCTV capturing beyond your property boundary without complying with data protection law | UK GDPR / Data Protection Act 2018 | ICO regulatory action; civil claim, e.g. the Ring doorbell case, £100,000 awarded to the neighbour |
| Unjustified covert monitoring of employees | UK GDPR / DPA 2018; Human Rights Act 1998 Article 8 | ICO enforcement; employment tribunal claims (constructive dismissal, breach of trust) |
| Secretly tracking or recording someone as part of a campaign of harassment | Protection from Harassment Act 1997 | Criminal prosecution; restraining orders; civil claims |
This table is a summary for orientation, not a substitute for legal advice. Actual outcomes depend heavily on the specific facts of a case.
FAQs
Are spy cameras legal in the UK?
Yes. Spy cameras are legal to buy and own in the UK. Using one is lawful for things like home security in areas you control, but recording people in private places, or capturing areas beyond your property, brings in criminal and data protection law.
Can I put a hidden camera in my own house?
Usually, yes, for your own household's security in shared areas such as entrances, hallways and living rooms. Keep cameras out of bathrooms and guest bedrooms, keep the view inside your boundary, and consider turning audio off.
Do I have to tell visitors about cameras in my home?
For purely domestic security inside your home there's no general legal duty to tell visitors, but telling people is good practice. If you regularly record someone who works in your home, such as a nanny or carer, the ICO expects you to tell them in most cases.
Is it illegal to put a recording device in someone else's house?
Placing a camera or recorder in another person's home without permission is high risk. Depending on the facts it can involve trespass, harassment, data protection breaches and, if it captures private acts, voyeurism offences.
Are listening devices legal in the UK?
They're legal to buy and own. Using one to record conversations you're not part of, especially in someone's home or car, is where the legal risk lies. Our guide to listening devices and the law explains the details.
Can I put a tracker on someone's car?
On your own car, yes. On someone else's car without their knowledge, it can amount to harassment or stalking, so don't do it.
How to cite this page
Source: SpyGear Direct, "UK Covert Recording & Spy Camera Law: The Complete Guide," https://spygeardirect.co.uk/blogs/guides/uk-covert-recording-spy-camera-law-the-complete-guide, last updated 7 November 2026.
Sources
- GOV.UK: Guidance on the use of domestic CCTV
- ICO: Data protection and monitoring workers
- legislation.gov.uk: Investigatory Powers Act 2016, section 3
- legislation.gov.uk: Investigatory Powers Act 2016, section 4
- legislation.gov.uk: Investigatory Powers (Interception by Businesses etc. for Monitoring and Record-keeping Purposes) Regulations 2018
- legislation.gov.uk: Sexual Offences Act 2003, section 67
- legislation.gov.uk: Voyeurism (Offences) Act 2019
- legislation.gov.uk: Protection from Harassment Act 1997
- Gateley: Ring doorbells and data rights
- policing.uk: Is it illegal to record a conversation in the UK?
- Human Rights Act 1998