How long are you allowed to keep CCTV footage
Honestly? There's no magic number that works everywhere. How long you can keep CCTV footage depends on where you live, why you're recording, and what laws you're under. But here's the thing—most places, especially the UK under GDPR and the ICO, say 30 to 31 days is the sweet spot. For your average business or home setup? Anything longer than that starts looking a bit excessive unless something specific went down.
What is the standard retention period for CCTV under GDPR?
GDPR—that's the General Data Protection Regulation, which covers the UK and EU—doesn't give you a fixed number of days. Instead, it's all about "data minimisation" and "storage limitation." Basically, don't keep footage longer than you actually need it. The ICO reckons 30 days is plenty for most shops or offices. If nobody's reported anything weird in that month, overwrite or delete it. Holding onto footage for 60 or 90 days without a solid reason? Yeah, that's probably a breach.
When can you keep CCTV footage for longer than 30 days?
Sometimes you gotta hold onto footage longer. It's not a loophole—it's just common sense. Here's when it's okay:
- Active Investigation: Something happened—a theft, a workplace incident, whatever. Keep the relevant clips until the investigation wraps up and any legal stuff is done.
- Insurance Claims: Got an insurance claim pending and the footage is evidence? Hold onto it until that's settled.
- Legal Disputes: If there's a formal complaint or lawsuit involving the footage, yeah, you can keep it.
- Health & Safety Incidents: An accident on site? Keep the footage for risk assessment or legal defence.
Just make sure you write down why you're keeping it longer. And delete it once the need's gone—don't let it sit around forever.
How long can you keep CCTV footage for home security?
Home CCTV's a bit more relaxed. If your camera only points at your own property—not the street, pavement, or your neighbour's garden—you're pretty much free to keep footage for a reasonable time. Most people go with 7 to 14 days for routine stuff. But if your camera catches a public footpath or your neighbour's driveway? Then you're playing by stricter GDPR rules, so 30 days max.
What are the legal requirements for business CCTV retention?
Businesses? That's where it gets serious. Here's a quick breakdown of what's typical:
| Business Type / Purpose | Recommended Retention | Legal Basis |
|---|---|---|
| Retail Shops / Offices | 30 days | Legitimate interest (crime prevention) |
| Banks / Financial Institutions | 90 days (often regulated) | Regulatory compliance / Fraud prevention |
| Warehouses / Logistics | 30-60 days | Security of goods / Theft prevention |
| Schools / Nurseries | 30 days (safeguarding) | Vital interest / Public task |
Checklist for compliance with CCTV retention laws
Want to stay on the right side of the law? Run through this list:
- Define the purpose: Know why you're recording—crime prevention, safety, whatever.
- Set a retention schedule: Make your system auto-overwrite after 30 days.
- Document exceptions: Keep a log of any footage kept longer, with the reason and incident number.
- Restrict access: Only let authorised people view or export footage.
- Display signage: Tell people they're being recorded and how long you keep the data.
- Review annually: Check your policy still matches what the law says.
Frequently Asked Questions (FAQ)
Can I keep CCTV footage for 90 days for general security?
Probably not. Without a specific incident, 90 days is overkill under GDPR and similar laws. It breaks the storage limitation rule. You'd need a really good, documented reason to go beyond 30 days.
What happens if I keep footage for too long?
Fines, legal trouble, and a hit to your reputation. The ICO can hit you with penalties up to 4% of your annual global turnover for serious breaches. Not worth it.
Do I need to delete footage if no crime occurred?
Yep. If nothing happened within your retention period—usually 30 days—delete or overwrite it. Keeping it "just in case" doesn't cut it legally.
Does the law differ between home and business CCTV?
Big time. Home users get more leeway if their cameras only cover their own property. Businesses? Way stricter—full data protection compliance, transparency, and all that.
Krótkie podsumowanie
- Ogólna zasada: Standardowy okres przechowywania nagrań CCTV to 30 dni, zgodnie z zaleceniami RODO i ICO.
- Wyjątki: Nagrania można przechowywać dłużej tylko w przypadku trwającego dochodzenia, postępowania sądowego lub roszczeń ubezpieczeniowych.
- Monitoring domowy: Jeśli kamera nie rejestruje przestrzeni publicznej, można przechowywać nagrania krócej (7-14 dni). W przeciwnym razie obowiązują surowsze zasady.
- Konsekwencje: Przechowywanie nagrań zbyt długo bez uzasadnionego powodu grozi karami finansowymi i sankcjami prawnymi.