What are my data protection duties if my CCTV is monitored remotely?

If you operate CCTV for a business, or domestically in a way that captures areas beyond your own property, you have duties under UK data protection law — including signage, a lawful basis, retention limits, and responding to requests from people recorded. Using a monitoring company does not transfer those duties away from you.

For businesses, CCTV is processing of personal data. That means the usual obligations: telling people it is happening, keeping footage no longer than necessary, keeping it secure, and being able to respond when someone asks for a copy of footage of themselves.

For homes, recording within your own boundary is generally treated as domestic use. Recording a neighbour's garden, a shared driveway or the pavement can take it outside that exemption, and doorbell cameras with audio are a common flashpoint.

Remote monitoring adds a processor: the monitoring centre handles footage on your behalf, so you need a contract that covers what they may do with it, how long they keep it, and how they keep it secure.

The ICO publishes guidance covering both business and domestic use, and it is the authoritative source. Ask any prospective provider to explain their retention period and their process for footage requests before signing.