UK ICO Guidance on Video Surveillance including CCTV (2022)
The UK ICO's guidance for organisations using CCTV and other video surveillance: do a DPIA and consider alternatives first, document a lawful basis, keep cameras out of toilets and changing rooms, put signs before the field of view, keep audio off, consult staff or unions before workplace cameras and keep them off rest areas, retain footage for the shortest time, secure and restrict viewing, log disclosures, answer subject access with redacted footage, and meet extra conditions for ANPR, body worn video, drones, facial recognition and vehicle cameras. Guidance, not law.
UK ICO Guidance on Video Surveillance including CCTV (2022) is a compliance framework from United Kingdom with 4 domains and 36 controls that map to 2 other frameworks. The largest domains are Complying with the data protection principles – UK ICO Guidance on Video Surveillance including CCTV (2022) (14 controls), Technologies other than CCTV – UK ICO Guidance on Video Surveillance including CCTV (2022) (10 controls), Accountability – UK ICO Guidance on Video Surveillance including CCTV (2022) (6 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
Accountability – UK ICO Guidance on Video Surveillance including CCTV (2022)
| Code | Title |
|---|---|
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::A.1 | A.1 Know who controls the system, agree joint and processor roles in writing, and set procedures, a named owner and regular audits |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::A.2 | A.2 Risk-based technical and organisational measures that show compliance, reviewed over the system's life |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::A.3 | A.3 Data protection by design: buy for a compliant solution, set procurement criteria, and make data easy to locate and extract |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::A.4 | A.4 DPIA before surveillance likely to be high risk (most cases), evidence-based, with alternatives considered; consult the ICO if high risk remains |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::A.5 | A.5 Record the surveillance processing under Article 30 and keep an appropriate policy document where required |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::A.6 | A.6 Register with the ICO and pay the data protection fee, unless exempt |
Complying with the data protection principles – UK ICO Guidance on Video Surveillance including CCTV (2022)
| Code | Title |
|---|---|
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.1 | P.1 Consider less intrusive alternatives first, aim cameras at the relevant space only, and document the lawful basis before deployment |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.10 | P.10 Minimum data, good-quality images, accurate time stamps and matching, documented algorithms, and governance features to retrieve and redact |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.11 | P.11 Retention: the shortest period for the purpose, not the recorder's capacity or default, documented, securely deleted and checked |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.12 | P.12 Secure storage and viewing: restricted access, encryption or equivalents, secure cloud and transfers, monitors visible only to authorised staff |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.13 | P.13 Review the system's effectiveness periodically and stop processing if it does not achieve its purpose |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.2 | P.2 Lawfulness: an Article 6 basis, an Article 9 condition for biometric identification, Article 10 and Schedule 1 for criminal offence data, and an appropriate policy document |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.3 | P.3 Fairness: meet reasonable expectations; cameras in toilets and changing rooms only in the most exceptional circumstances |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.4 | P.4 Signs before the field of view: visible, readable, sized for the setting, naming operator, purpose and contact, backed by fuller information |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.5 | P.5 Define purposes from the start, record them and state them in privacy information; new uses only if compatible, consented or required by law |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.6 | P.6 Audio recording: not of conversations, off by default, used only on an evidenced need, and announced separately |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.7(a) | P.7(a) Workplace surveillance: consult the workforce (staff or trade unions) in the DPIA, notify employees, and inform visitors and customers |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.7(b) | P.7(b) Workplace surveillance: target risk areas with low privacy expectations; continuous monitoring of individuals only in the rarest cases; not rest areas |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.8 | P.8 Live streaming of identifiable people is processing even without recording |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::P.9 | P.9 Recording online meetings and lessons: necessary, explained, not published without express permission, shared securely |
Governance after deployment – UK ICO Guidance on Video Surveillance including CCTV (2022)
| Code | Title |
|---|---|
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::G.1 | G.1 Disclosures: controlled, consistent with the system's purpose, logged, secure, with sharing agreements; no uploading to the internet |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::G.2 | G.2 Staff recognise rights requests; procedures, a log, search by date, time and place, and a common video format |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::G.3 | G.3 Subject access to footage: a permanent copy within one month, preserve footage in scope, a transcript or still is usually not enough |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::G.4 | G.4 Erasure and restriction of footage on the grounds that apply |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::G.5 | G.5 Redact third parties case by case (blur, mask, solid fill, metadata) with trained staff or a contracted processor |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::G.6 | G.6 Public authorities: FOI requests for footage within 20 working days, section 40 applied, redaction considered |
Technologies other than CCTV – UK ICO Guidance on Video Surveillance including CCTV (2022)
| Code | Title |
|---|---|
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.0 | T.0 Linking surveillance systems and matching data: accurate, not excessive, for defined purposes, necessary throughout |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.1 | T.1 ANPR: genuine need, DPIA, minimum and justified cameras, road-safe signage, accurate matching data, short retention for vehicles not of interest |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.2 | T.2 Body worn video: DPIA, recording switched on only when justified, audio and video controlled separately, people told, secure devices and storage policy |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.3 | T.3 Drones: genuine need, DPIA for collateral intrusion, CAA registration, trained operators, public information, recording not continuous |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.4(a) | T.4(a) Facial recognition: a DPIA for every deployment, a documented justification, an Article 6 basis and Article 9 condition, and meaningful human review |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.4(b) | T.4(b) Facial recognition: documented approach to bias, representative training data, testing, error rates recorded and corrected |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.4(c) | T.4(c) Facial recognition on consent: a real choice and a non-biometric alternative without detriment |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.5 | T.5 Commercial smart doorbells: DPIA, positioning away from neighbours, activation on press, secure apps, signage |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.6 | T.6 In-vehicle cameras: DPIA, in-vehicle signage naming the controller, audio off by default, no continuous recording during private use |
| uk-ico-guidance-on-video-surveillance-including-cctv-2022::T.7 | T.7 Portable and action cameras: record only where people would expect it, secure devices, inform, crop, and assess first |
Maps to 2 other frameworks
Coverage is not the same as your position
This page shows what UK ICO Guidance on Video Surveillance including CCTV (2022) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is UK ICO Guidance on Video Surveillance including CCTV (2022) and who does it apply to?
UK ICO Guidance on Video Surveillance including CCTV (2022) is a compliance framework from United Kingdom with 4 domains and 36 controls. The UK ICO's guidance for organisations using CCTV and other video surveillance: do a DPIA and consider alternatives first, document a lawful basis, keep cameras out of toilets and changing rooms, put signs before the field of view, keep audio off, consult staff or unions before workplace cameras and keep them off rest areas, retain footage for the shortest time, secure and restrict viewing, log disclosures, answer subject access with redacted footage, and meet extra conditions for ANPR, body worn video, drones, facial recognition and vehicle cameras. Guidance, not law. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does UK ICO Guidance on Video Surveillance including CCTV (2022) actually require?
UK ICO Guidance on Video Surveillance including CCTV (2022) has 36 controls organised across 4 domains. The largest domains are Complying with the data protection principles – UK ICO Guidance on Video Surveillance including CCTV (2022) (14 controls), Technologies other than CCTV – UK ICO Guidance on Video Surveillance including CCTV (2022) (10 controls), Accountability – UK ICO Guidance on Video Surveillance including CCTV (2022) (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of UK ICO Guidance on Video Surveillance including CCTV (2022) do I already cover?
UK ICO Guidance on Video Surveillance including CCTV (2022) maps to 2 other compliance frameworks. The top mapping partners are UK GDPR (UK General Data Protection Regulation) (94% coverage), ISO 27001:2022 (3% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement UK ICO Guidance on Video Surveillance including CCTV (2022)?
Start your UK ICO Guidance on Video Surveillance including CCTV (2022) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about UK ICO Guidance on Video Surveillance including CCTV (2022) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 36 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 844 frameworks.
Get Started Free →Free forever — no credit card required