The camera system captures people, so the same rules of consideration apply as for any processing of personal data. No legal jargon, just practical advice, what works in practice and what causes problems.
A recording showing a person's face or a vehicle registration number is personal data, just like a name in a table. This does not only concern large companies; the same rules apply to small businesses or family homes if the camera captures more than just the owner's private property. The good news is that in practice, a few simple steps are enough to set up the system sensibly and without unnecessary risks.
A proven practice is to place an information sign in a visible location near the entrance to the monitored area stating that the space is being monitored by a camera system. A simple pictogram with brief text and contact details for whom to approach if necessary is sufficient. The sign should be positioned where people enter the monitored area: not inside, where it is already too late. For vehicle entrances, we recommend placing the signage at the entrance itself, rather than only at the barrier.
Basic rule: the camera should only record what you actually need to monitor, your own property, entrance, warehouse or car park. Avoid shots that unnecessarily capture a neighbour's land, windows of a neighbouring house or a large section of a public thoroughfare used only by passers-by. If the camera must cover part of a public space (for example to monitor a driveway), help by narrowing the field of view to the essential area and masking the rest in the camera settings. Cameras should never be aimed at particularly sensitive areas such as changing rooms, toilets or employee break rooms.
The recommended practice is to retain recordings only for as long as necessary, i.e., long enough to resolve any potential incident, and not much longer. For most businesses and households, this amounts to one to two weeks. Choose a longer retention period only where justified, such as for entry logging. Once the retention period expires, the recording should be automatically overwritten by new footage: the recorder's settings handle this standardly, so no manual deletion is required.
Access to live video feeds and stored recordings should be restricted to a small circle of people who genuinely need it: typically the owner, managing director or an authorised security staff member. It is worthwhile protecting access with a strong password, optionally two-factor authentication for remote mobile access, and not sharing login credentials broadly among employees. If a recording addresses a specific incident (for example theft), share only the relevant excerpt from it, not the entire archive.
In apartment buildings and the building's owners' associations, it is often discussed whether a camera in the entrance or on the corridor causes more disturbance than necessary. The rule is the same as elsewhere: the camera should be aimed at the entrance doors, staircase or lift, not towards the interior of individual flat doors. It is worthwhile to inform owners or tenants in advance about the installation and scope of coverage, even though the final decision usually rests with the board or manager, this prevents later complaints that no one was informed beforehand about the cameras.
If the camera also covers areas where employees move: the shop, warehouse or reception. It is good practice to inform them of the system's existence, rather than relying solely on a sign by the door. A brief explanation of exactly where the cameras are located, what they monitor and what the recording is used for is sufficient. This avoids any feeling that performance is being covertly monitored, while also serving as a deterrent, people know that entry and movement in sensitive zones are recorded.
Occasionally, an external party may request footage, for example, a participant in a traffic accident near the property or a neighbour involved in a boundary dispute. It is advisable to clarify in advance who has decision-making authority in such situations and how to process the request: typically, it suffices to verify the applicant's legitimate interest, provide only the relevant excerpt concerning the specific incident rather than the entire archive, and record the handover. If you are unsure, it is better to seek advice than to release the footage immediately or refuse the request unnecessarily.
As part of the installation, we also set the camera viewing angles so they do not capture more than necessary, recommend retention periods based on the type of operation, and provide information signage for the site. We handle this as a standard part of the design, not as additional paperwork, just as we describe in CCTV system with recording for businesses.
Free inspection and proposal, ensuring cameras are aimed exactly where they should be.