LeadersSafeguardingCPDGovernorHubKeyGPT
Training Hub

Using CCTV cameras in school

You can only have CCTV cameras in your school if you have a lawful reason for doing so. Understand how the UK GDPR impacts your school's use of CCTV and what you'll need to consider before installing it.

Last reviewed on 14 April 2026See updates
School types: All•School phases: All•Ref: 11819
Contents
  1. You can use CCTV, but it must be justified
  2. Don't collect more data than you need
  3. You must let people know when they’re in an area under CCTV 
  4. Set out your approach in a CCTV policy
  5. Don't keep recordings for longer than necessary
  6. Be aware of individuals’ rights 
  7. Using CCTV in residential schools
  8. Use the ICO's checklist to assess compliance

You can use CCTV, but it must be justified

You can use CCTV as long as you have a ‘lawful basis’ for processing personal data. This is a requirement under the UK GDPR.

The 2 lawful bases that are most appropriate are:

  • Public task: if you need to use CCTV to allow you to carry out your official duties
  • Legitimate interests: if you need to take or use CCTV because you or a third party has legitimate interests

Consent is not an appropriate lawful basis for CCTV because it's:

  • Unlikely that you'll be able to obtain consent from every person who may be recorded on CCTV
  • Very difficult for people to opt out of

This is explained in the DfE's guidance on using CCTV in schools.

If you're using CCTV for the first time, you should carry out a DPIA

Analyse your data processing Find and minimise data protection risks Help you