Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD) Art. 22: Run video surveillance proportionately: minimal public-street capture, one-month deletion, visible notice sign

Article 22: public or private persons may process camera images to protect people, property and facilities; public roads may be captured only as indispensable (more for strategic or transport infrastructure, never inside private homes); images are deleted within one month unless needed to prove acts against people or property, in which case they go to the authorities within 72 hours of learning of the recording, and blocking does not apply; information is given by a visible sign identifying the processing, controller and rights (with a link or code allowed); purely domestic interior cameras are outside the GDPR but security companies monitoring homes are not; employer use follows Article 89.