CCTV signs: what UK law requires

This is general guidance, not legal advice. The ICO says its CCTV guidance is under review following the Data (Use and Access) Act 2025, so check the ICO’s current guidance before relying on any detail.

If your CCTV can identify people, you need signs. Data protection law says people must know when they’re in an area being recorded, and for most business sites a sign is how you tell them. A notice on your website helps, but the ICO says that on its own isn’t enough.

This guide covers what a sign has to say, where it goes, and the mistakes we see most often. For the wider picture (lawful basis, DPIAs, retention and access requests), see our guide to CCTV and GDPR for businesses.

Do you need CCTV signs?

Yes, if the cameras capture images of identifiable people, whether that’s staff, visitors, customers, drivers or passers-by. That covers almost every commercial system: a camera on a loading bay, a door entry camera, a car park camera with ANPR.

The duty comes from UK GDPR, which requires you to tell people when you collect their personal data. The ICO’s guidance on video surveillance puts it simply: you must let people know when they’re in an area where a surveillance system is in operation.

Police forces and local authorities must also follow the Surveillance Camera Code of Practice, which asks for as much transparency as possible and a published contact point. Other organisations can adopt it voluntarily, and it’s a useful benchmark.

What the sign must say

The ICO expects signs to be clearly visible and readable, and to tell people four things.

A sign along these lines covers it:

CCTV in operation. Images are recorded for crime prevention and the safety of staff and visitors. This system is operated by [organisation]. Contact [phone or email]. More information: [web address].

Make sure the people who answer that phone number or inbox know what to do with a CCTV enquiry or a request for footage.

Where to put signs

The rule is that people should see the sign before they’re recorded. The ICO says it isn’t fair for someone to read a sign only after the camera has already captured them.

• At every entrance to the covered area. Pedestrian gates, vehicle gates, building entrances and doors from car parks.
• Before the camera’s field of view. Place the sign at a reasonable distance before the area the camera covers, not under the camera at the far end of it.
• Inside the area, too. Further signs inside reinforce the message, especially on large sites.
• More signs where cameras are less expected. The ICO says signs should be more prominent and more frequent where people are less likely to expect monitoring.

At the design stage, it’s worth planning sign positions alongside camera positions. A camera that covers the footpath outside your gate needs a sign people pass before they reach that footpath.

How many signs, and what size

There’s no fixed number or size. The ICO’s test is whether the sign can be seen and read in its setting, by pedestrians or by drivers.

As a rule of thumb, many sites use A4 signs at pedestrian entrances and A3 or larger at vehicle entrances, mounted where they’re readable: at eye level for people on foot, and at driver height for vehicles, facing oncoming traffic. Choose a weatherproof material outdoors and replace signs that have faded.

Signs for ANPR and audio

ANPR. Number plates are personal data. The ICO’s ANPR guidance says signs must make clear that cameras are in use and who operates them. At a car park or a vehicle gate, put a sign where drivers can read it before the barrier, and mention number plate recognition if you use plates for anything beyond recording, such as access or parking enforcement.

Audio. Recording sound is much harder to justify than recording images. The ICO says audio should normally be switched off, and used only where there’s a clear need that less intrusive methods can’t meet. If you do record audio, for example through a trigger button at a reception counter, you must tell people separately: “CCTV in operation” doesn’t cover it. Say “This system records images and sound” on the sign.

Body-worn cameras and drones raise their own problems, because there’s no fixed place for a sign. The ICO covers them in separate guidance.

Covert cameras: the narrow exception

Recording without signs is only justified in exceptional circumstances. The ICO’s guidance on monitoring workers sets the conditions:

• there are grounds to suspect criminal activity or gross misconduct
• telling people would prejudice the investigation
• senior management authorises it
• it’s covered by a DPIA
• it targets a specific problem for as short a time as possible, and stops when the investigation ends
• it’s never used in toilets, changing rooms or other places where people expect privacy

Covert recording isn’t a way to avoid putting up signs on a normal system. Everyday CCTV should be overt.

Common mistakes

• No contact details. The most common gap. “CCTV in operation” with a camera symbol and nothing else doesn’t tell people who to ask.
• No purpose. People should know why they’re being recorded.
• Signs behind the camera. A sign inside the door, after the entrance camera has already recorded people, is too late.
• The wrong name. Signs that name the installer or the monitoring company instead of the organisation responsible for the system.
• “Monitored 24 hours” when it isn’t. If nobody watches the cameras live, don’t say they do. People may assume help is on its way.
• Faded or hidden signs. Signs behind vehicles, under foliage or bleached by the sun don’t count as clearly visible.
• Forgetting audio. Intercoms and cameras that record sound need their own warning.

Checklist

• Signs at every entrance, before the cameras’ field of view
• More signs inside the covered area, and where cameras are less expected
• Each sign says CCTV is in operation, why, who runs it (unless obvious) and how to contact them
• A web address for your CCTV policy or privacy notice
• A separate warning if the system records sound
• ANPR mentioned at vehicle entrances where plates are used for access or enforcement
• Readable at the right height and distance for pedestrians and drivers
• Staff know how to deal with CCTV queries and requests for footage
• Signs checked when cameras are added or moved, and replaced when faded

Signs are one part of a lawful system. You also need a retention period you can defend: see how long a business can keep CCTV footage.

Adding cameras, or not sure your current coverage matches your signs? We design and install commercial CCTV around the purpose you’ve written down, and a maintenance contract keeps the system checked over time. Talk to us about CCTV.