What Places Should Never Have Security Cameras in a Building?

Security cameras can help investigate a break-in, resolve a safety incident or protect a building entrance. But more cameras do not automatically mean more security. A camera aimed at the wrong place can capture intimate activity, private conversations or everyday behaviour that has nothing to do with a legitimate security concern.

For property managers, landlords, resident committees and building owners, the starting question should be: What security question does this camera answer? If there is no clear, proportionate answer, the camera may not belong there. Good CCTV practice begins with data minimisation: collect only what is needed, from the smallest practical area, for a defined purpose.

This guide covers places that should generally be treated as off-limits, how to govern camera decisions, and practical steps for controlling views and deleting footage. It is written for UK buildings, where CCTV use must be considered alongside privacy and data-protection obligations. It is not legal advice; seek advice for the specific building and circumstances.

Places that should generally have no cameras

Restrooms and toilets: no cameras in restrooms

No cameras in restrooms should be the default rule. Toilets and changing spaces are areas where people have staff access to security footage a strong expectation of privacy. A camera inside a cubicle, washroom or toilet area can capture people in highly personal circumstances and may create serious legal, safeguarding and reputational risks.

Do not install cameras in cubicles, above sinks, near mirrors or in any position that could reveal a person changing, using a facility or reflected in a surface. A claim that a camera is intended to deter vandalism or identify misuse does not, by itself, make intrusive monitoring appropriate.

If there is a genuine security problem, consider less intrusive measures first: improve locks and lighting, inspect access controls, carry out more frequent checks or place a camera outside the entrance. Any external view should be tightly framed so it records the approach or doorway, not activity inside the restroom. Check the view in person, including through reflections and when doors open.

Changing rooms and locker rooms: a locker room camera ban

A locker room camera ban is a sound building-policy standard. Changing rooms, showers, poolside changing areas and similar spaces are particularly sensitive. Cameras should not record people undressing, dressing, showering or using lockers in a way that exposes their personal activity.

Even a camera said to be aimed only at lockers may capture people changing or reveal who uses a particular facility and when. A sign at the entrance does not make an intrusive field of view acceptable. Nor does restricting access to the recording solve the underlying problem of collecting footage that should never have been captured.

If theft or access problems occur, investigate alternatives before considering surveillance: improve locker security, review key or fob controls, adjust staff presence, or monitor an external corridor. Where an adjacent-area camera is justified, use a carefully limited view and privacy masking. Test the camera from different angles and at different times of day.

Inside private homes and residential units: no cameras inside units

No cameras inside units should be the starting point in a residential building. A landlord, managing agent, concierge or residents’ association should not casually install or access cameras inside a resident’s home. A home is a private space, and surveillance can expose visitors, routines, family life and other sensitive details.

Building CCTV should normally be confined to appropriate shared areas, such as an entrance or a specific shared corridor, and only where there is a defined need. It should not be positioned to look through open doors or windows into flats. Cameras in a common hallway must also be aimed and configured so they do not unnecessarily monitor the inside of a unit whenever its door opens.

There may be exceptional circumstances involving a specific, lawful arrangement or an urgent safety issue, but these are not a licence for general monitoring. Obtain appropriate legal advice, document the purpose and authority, and consider less intrusive options. Do not assume that a board vote or a lease clause automatically resolves every privacy concern.

Other locations needing a strong presumption against cameras

Some spaces may not be as intimate as toilets or changing rooms, but still call for particular caution. A camera may be inappropriate if it records confidential activity, sensitive personal choices or people seeking help. Assess the actual view and purpose rather than relying on the room’s label.

Medical, counselling or support rooms: Do not record consultations or people receiving sensitive services. Monitor access from outside only if there is a specific, proportionate need.
Staff welfare rooms: Break rooms and rest areas are not substitutes for supervising employees. Consider workplace privacy and employment requirements before any proposal.
Private offices or meeting rooms: Avoid recording confidential discussions, screens or documents. Access-control logs may meet a security need with less intrusion.
Areas with confidential displays: Avoid capturing computer screens, noticeboards, access codes, delivery labels or personal documents.
Windows and neighbouring property: A camera should not unnecessarily overlook homes, gardens or public areas beyond the building’s security need.

Make the camera earn its place

Before approving a camera, write down the specific problem it is meant to address. “For security” is too vague. Is there a documented pattern of unauthorised entry at a particular door? Are there repeated incidents in a car park? Could better lighting, a repaired lock or staffed access control solve the problem instead?

Use a simple necessity and proportionality check:

Define the purpose. State the incident, risk or security outcome the camera is intended to address.
Consider alternatives. Check whether lighting, locks, patrols, alarms or access-control changes would work with less collection of personal information.
Limit the view. Capture only the area necessary for the stated purpose. Avoid recording adjoining private spaces or routes where people have no relevant security connection.
Set rules before installation. Decide who owns the system, who can view footage, when it may be disclosed and when it will be deleted.
Review the result. Confirm the camera actually addresses the risk and has not become a general-purpose monitoring tool.

A camera installed “just in case” is not a good enough reason. If the building cannot explain what the camera is for, who is responsible for it and how its footage is controlled, pause the installation.

Ownership and governance: who decides?

CCTV decisions should not be left to whoever happens to have access to the app or maintenance cupboard. The building should identify the organisation or person responsible for the surveillance system and make clear who has authority to approve changes. Depending on the building and its arrangements, that may involve an owner, management company, landlord, housing provider or residents’ association. Get advice where responsibilities are shared or unclear.

Before a camera is commissioned, record the decision, purpose, camera location, field of view, retention period and authorised users. Include the arrangements in a CCTV policy or operating procedure. Residents and staff should be able to find out who to contact with a question or concern.

Access should be limited to named, trained people who need it for an authorised task. Routine viewing out of curiosity is unacceptable. Keep an access log that records who viewed or exported footage, when, and why. Review permissions when roles change, contracts end or a person no longer needs access.

Also ask where exported clips end up and who can open them. Do not circulate raw footage by ordinary email or drop it into a shared folder without access controls and a deletion date. Use a restricted, secure process; record the recipient and purpose; and remove the copy when it is no longer needed. Disclosures should be handled under the building’s policy and applicable legal requirements, not on an informal “send me the clip” basis.

Control the field of view—not just the camera location

I'll be honest with you: placement is only half the job. A camera mounted in a corridor can still record private doorways, screens, windows or neighbouring areas. Review the actual image from the camera, rather than assuming that its mounting position tells you what it captures.

Use the narrowest lens and angle that meet the documented purpose.
Apply privacy masks to areas that must not be recorded, and check that masks remain effective after adjustments.
Test views when doors are open, lights are on at night and reflective surfaces are in use.
Disable audio recording unless there is a clearly justified, separately assessed need. Audio can capture more intrusive information than video.
Recheck the field of view after maintenance, camera replacement, software changes or a change to the surrounding layout.

Keep a simple placement checklist. Beyond faces and vehicle number plates, check for reflections, computer screens, paperwork, access codes, children, neighbouring windows and private unit interiors. Ask whether a person’s route, association or presence in a sensitive place could be revealed unnecessarily. Redaction is useful when an authorised clip must be disclosed, but it is not a substitute for preventing excessive recording in the first place.

Retention periods and routine deletion

Footage should not be kept indefinitely because storage is available. Set a retention period that matches the stated security purpose, then configure routine deletion. There is no one period that suits every building: the appropriate period depends on the risks, system capability and relevant obligations. Document the reasoning and review it periodically.

If a specific incident occurs, preserve only the relevant footage for as long as it is needed to handle that incident or an authorised process. Record what was retained, why, who approved it and when it should be reviewed or deleted. Do not let an incident copy become an untracked archive.

Check that deletion applies to all relevant copies, including exports and backups where practicable. A policy that promises deletion is not enough if clips are routinely downloaded to unmanaged devices. Confirm that system settings, staff practices and supplier arrangements support the retention rule.

Signs, transparency and pricing information

People should be informed when CCTV is operating. Use clear signs at or before monitored areas, and provide a route to more detailed information about the purpose, responsible organisation, retention and contact point. Signage does not make an otherwise unjustified camera acceptable, but it is an important part of transparent operation.

No prices are listed in the scraped article. This guide is about appropriate camera locations and governance, not a product or installation price comparison. Costs vary with equipment, cabling, storage, maintenance and building requirements. Obtain itemised quotations separately, and make sure they include privacy controls, secure access, retention settings and ongoing support—not just the camera hardware.

A practical decision table

Location Default approach Less intrusive option to consider Restrooms and toilets No cameras inside Improve locks, lighting or checks; if necessary, assess a tightly framed external entrance view Changing rooms and locker rooms Apply a locker room camera ban Improve lockers and access controls; assess external corridors only Private residential units No cameras inside units Use proportionate monitoring of relevant shared access points Shared entrance or garage Consider only with a defined purpose and limited view Adjust lighting, access systems or patrols; mask unrelated areas

Share this guide

Help your building make CCTV decisions deliberately—not by adding cameras first and asking privacy questions later.

Share on Facebook
Share on X (Twitter)

The bottom line

Keep cameras out of restrooms, changing rooms and private homes. Treat sensitive spaces with a strong presumption against surveillance, and do not rely on signs or restricted access to justify recording that should never take place. For every camera in a shared area, define the security question, limit the field of view, assign clear responsibility, restrict access and set routine deletion.

Before approving another camera, ask: What security question does it answer? Then ask where exported clips end up and who can open them. One client recently told me was shocked by the final bill.. If those answers are unclear, the building is not ready to install or operate the camera responsibly.