Skip to content

CCTV Privacy Masking and ICO Compliance Guide

UK households using CCTV must comply with ICO data protection rules, GDPR, and the Protection of Freedoms Act. This guide covers ICO registration, privacy masking setup, signage requirements, subject access requests, and legal camera positioning for domestic CCTV systems.

The ICO (Information Commissioner's Office) regulates domestic CCTV under UK GDPR and the Data Protection Act 2018. Key requirements: 1) ICO Registration - any CCTV that records beyond your private property boundary must be registered with the ICO. Registration costs 35 per year and can be completed online at ico.org.uk. 2) CCTV Signage - clear signs must be displayed at all entry points stating CCTV is in operation, who is operating it (your name), and contact information. Signs cost 5-10 from Amazon UK. 3) Privacy Masking - cameras must not record or track neighbours' private property, gardens, or public areas unnecessarily. Privacy masks must be configured in the NVR or camera web interface to block these areas. 4) Data Retention - footage should be retained for no longer than 14-31 days for domestic systems. Automatic overwrite when the HDD is full is acceptable. 5) Subject Access Requests - anyone recorded by your CCTV can request copies of their footage within 30 days. You must provide it free of charge. 6) Data Security - footage must be stored securely with password protection on the NVR. Encryption of stored footage is recommended but not yet mandatory for domestic systems. Failure to comply can result in ICO enforcement action and fines up to 8.7 million or 2% of annual turnover.

Configuring Privacy Masking on CCTV Cameras

Step 1: Access each camera's web interface via the NVR or directly by IP address. Log in with admin credentials. Step 2: Navigate to the privacy mask settings (Hikvision: Configuration > Image > Privacy Mask, Dahua: Camera > Conditions > Privacy Masking). Step 3: Draw rectangular masks over areas you must not record: neighbours' windows, gardens, side passages, public pavements beyond your boundary, and any area where people have a reasonable expectation of privacy. Step 4: Apply the mask to both main stream and sub-stream. Some cameras apply masks only to the main stream by default. Step 5: For PTZ cameras, set privacy masks on each preset position individually. PTZ cameras pose a greater privacy risk because they can pan across multiple properties. Step 6: Test the masking by walking through the scene and checking that masked areas are completely blacked out in both live view and recorded footage. Step 7: Document your privacy masking configuration - take screenshots and save them with your ICO registration documents. This demonstrates compliance in case of an ICO investigation. Step 8: Review masking annually or when you change camera angles. Trees growing or fence removal may expose new areas to camera views.

Specifications and Comparison

Compliance Item Requirement Cost Action Required
ICO Registration Mandatory if recording beyond boundary 35/year Register at ico.org.uk
CCTV Signage Clear notices at all entrances 5-10 Order and install before commissioning
Privacy Masking Block neighbour/public areas Free Configure per camera in settings
Data Retention Max 14-31 days Free Set auto-overwrite in NVR
Subject Access Request Respond within 30 days Free (first copy) Keep footage searchable
Data Security Password protect NVR Free Strong password, update firmware

FAQ

Do I need to register my home CCTV with the ICO?
Yes if any camera captures areas beyond your private property boundary. This includes Ring Doorbells pointing at the public footpath, driveway cameras showing the pavement, and garden cameras overlooking neighbours' property. If all cameras are strictly within your property, registration is not required. Check the ICO home CCTV checklist at ico.org.uk.
How do I configure privacy masking on Hikvision cameras?
Log into the camera web interface, go to Configuration > Image > Privacy Mask. Click Draw Area and drag a rectangle over the area to mask. Multiple masks can be added per camera. Apply to both main stream and sub-stream. Test by viewing the camera feed and confirming masked areas appear completely black.
Can a neighbour demand I remove my CCTV camera?
If your CCTV camera captures their private property (their garden, windows, or private areas), they can complain to the ICO. The ICO will investigate and can order you to reposition, mask, or remove cameras. Avoid this by carefully positioning cameras to record only your property and using privacy masks where necessary. For more information see our CCTV Camera Placement Guide for UK Homes.

Last updated: 2026-05-31.

External Resources

For further information consult authority guidelines at the Royal Society for the Prevention of Accidents.