CCTV footage can help settle a disagreement, explain what happened, or support a claim. But asking for footage that shows someone else isn’t as simple as “request and receive.” UK privacy rules limit what a business or council can share. So, can I request CCTV footage of someone else?
In this guide, we will explain when a request can work and the legal ways to make it. You’ll see the steps to follow, what to include so the owner can find the clip faster, and what usually blocks a request, like short storage times or privacy limits. We’ll also share practical tips to keep the process smooth and lawful.
Legal Framework for Accessing CCTV Footage in the UK
The UK’s legal framework for CCTV access is designed to balance public safety and security needs with individual privacy rights. Several key laws determine who can request footage and under what circumstances. Below, we will explore the core requirements and common scenarios in which requesting CCTV footage of others may be permissible.
Understanding GDPR and Data Protection Act Requirements
The General Data Protection Regulation (GDPR) was introduced in 2016 as an EU-wide framework designed to protect personal data and individual privacy rights. Following Brexit, the UK GDPR was incorporated into UK domestic law and took effect on 1 January 2021. Alongside this, the Data Protection Act 2018 (DPA 2018) provides UK-specific provisions, including exemptions, enforcement powers, and rules governing the processing of sensitive data. Together, these laws ensure that personal data, such as CCTV footage in which individuals can be identified, is processed lawfully, fairly, and transparently.
Under these laws, CCTV camera operators must have a valid lawful basis for recording footage, most commonly legitimate interests such as crime prevention or public safety. They must also comply with core data protection principles, including data minimisation (collecting only what is necessary) and storage limitation (retaining footage only for as long as needed, usually around 31 days). Transparency obligations require clear signage and accessible privacy notices explaining how footage is used.
Requests fall under Subject Access Requests (SARs or DSARs), which are generally intended for accessing your own personal data. Requesting footage of someone else, however, requires a clear and legitimate legal basis, such as law enforcement purposes or situations where the footage also includes you.
When You Are Allowed to Request Footage of Others
So, can I request CCTV footage of someone else? In most cases, you can not request CCTV footage solely of another person due to strict privacy protections. However, certain exceptions do apply. For example, if you are the victim of a crime such as vandalism or assault, the police or an insurance provider may request the footage on your behalf for investigative purposes.
In civil matters, such as neighbour disputes, access may be possible if the footage covers shared or public areas and you agree to the redaction of third parties. Law enforcement agencies can require access to CCTV footage as part of a criminal investigation. In contrast, private individuals must show a clear legal basis, such as a court order or an urgent need to prevent harm.
How to Request CCTV Footage Legally
If you believe you have legitimate grounds to request CCTV footage involving others, it is essential to follow formal procedures to remain compliant with UK data protection laws. The sections below explain the correct process, the information you need to prepare, and the response time and possible outcomes you can expect after submitting a request.
Steps to Make a Data Subject Access Request (DSAR)
In most cases, requesting CCTV footage is done through a Data Subject Access Request (DSAR). Here’s a step-by-step guide.
Step 1. Identify the Data Controller
Find out who operates the CCTV system, such as a business, local council, or private organisation. Check CCTV signage, the organisation’s privacy notice, or search the ICO public register for the correct contact details.
Step 2. Gather Key Details and Documents
Prepare specific information to support your request, including the date, time, and location of the footage, a brief description of the incident, and your reason for requesting access.
Step 3. Prepare Your Request
Submit your DSAR in writing by email or letter to create a clear record. Use a subject line such as “Subject Access Request under UK GDPR” and clearly state the footage you are requesting, for example, CCTV from a specific location, date, and time.
Step 4. Submit the Request
Send the request using the organisation’s preferred method, such as an online form or dedicated email address. You may also use the ICO’s free SAR email template. Keep copies of your request and any confirmation messages.
Required Information and Documentation
Providing clear and complete information helps avoid delays or refusals. When submitting a DSAR for CCTV footage, you should be prepared to include:
- Personal Identification: Proof of identity, such as a copy of your passport, driving licence, or birth certificate, for verification.
- Proof of Address: Recent documents like a utility bill, bank statement, or council tax bill (dated within the last three months) to confirm your location.
- Incident Details: Exact date, time range, and location of the footage; a brief description of the event or individuals involved (without breaching others' privacy).
- Request Justification: Explanation of your lawful basis (e.g., legitimate interest under GDPR Article 6), such as for insurance claims, legal proceedings, or personal safety.
- Format Preferences: How you want the data provided (e.g., digital copy, on-site viewing) and any accessibility requirements.
- Authorisation for Representatives: If submitting on behalf of another, include their consent letter, power of attorney, or equivalent legal documentation.
Typical Response Times and Possible Outcomes
Data controllers must respond to DSARs without undue delay and usually within one calendar month, with extensions of up to three months allowed for complex cases. Under the DUAA reforms, organisations must make reasonable efforts to respond but may refuse requests that are excessive or overly burdensome. If clarification is needed, the response deadline pauses until you provide it.
Possible outcomes include receiving redacted footage, being invited to view the footage on-site, receiving a written explanation if footage is unavailable, or a formal refusal. If your request is denied, you have the right to complain to the ICO or pursue legal remedies. As CCTV footage is commonly retained for only around 31 days, acting promptly is essential.
Challenges and Limitations
Although UK law provides mechanisms for accessing CCTV footage, requesting recordings of others can be complex and is often subject to limitations. Privacy concerns frequently create obstacles, and not all requests are approved. Common challenges include:
- Privacy Protections for Third Parties: Footage cannot be released if it identifies other individuals without consent. Moreover, redaction may be required, which can be time-consuming and costly.
- Exemptions for Domestic Systems: Home or neighbour CCTV systems may fall outside the GDPR scope if used purely for personal purposes, limiting enforcement options.
- Short Retention Periods: Most systems automatically delete footage after around 31 days, making delayed requests ineffective.
- Refusals Due to Complexity: Requests that are overly broad or difficult to process may be refused or subject to fees in limited cases.
- Legal and Ethical Barriers: Requests made out of curiosity or without a valid legal purpose are unlikely to succeed and may lead to complaints or penalties.
- Technical Issues: Poor image quality or crowded scenes can make identification and redaction difficult.
Best Practices for Requesting Footage
To maximise your chances of success, approach CCTV footage requests carefully and professionally. Thoughtful preparation and respectful communication can significantly improve outcomes. Consider the following best practices:
Act Promptly: Submit your request as soon as possible, ideally within 30 days, before footage is deleted.
Be Specific and Organised: Provide clear details and valid identification to avoid unnecessary delays.
Seek Professional Assistance if Needed: For complex or sensitive cases, involve solicitors, insurers, or the police.
Respect Privacy Concerns: Be open to receiving redacted footage or viewing recordings on-site.
Follow Up Politely: If there is no response after two weeks, send a courteous follow-up and escalate to the ICO if necessary.
Bonus Tips: Build Your Own Security System
Requesting someone else’s CCTV can take time, and privacy rules can limit what you receive. The simplest way to avoid that stress next time is to keep your own coverage for your home or business, so you can pull footage fast when something happens.
The eufy NVR Security System S4 Max is a great choice for both home and business users. This expandable 8-port PoE NVR comes with a 2TB HDD for continuous 24/7 recording and supports up to 16 cameras in crisp 4K resolution. With AI recognition, dynamic tracking, and fully local storage, it captures relevant activity while keeping your data secure and private.
The eufyCam S3 Pro 2-Cam Kit is another excellent option. It includes 4K solar-powered cameras with MaxColor Vision, delivering bright and detailed footage even in low light, while AI object recognition ensures accurate monitoring. With 16GB of local storage on HomeBase, your recordings remain fully secure and fee-free, giving you private, easy access via the app.
Conclusion
Can I request CCTV footage of someone else? In the UK, accessing someone else’s CCTV is possible but tightly restricted by privacy laws. By understanding GDPR, following DSAR procedures, and preparing for potential challenges, you can pursue access ethically and effectively while staying compliant.
For easier control over your own recordings, consider setting up a privacy-focused system at home with eufy. You can monitor your property more securely and access footage whenever needed!
FAQ
Can I request CCTV footage from my neighbour’s camera?
Requesting footage from a neighbour’s CCTV can be difficult because domestic systems are often exempt from GDPR if used solely for personal household purposes.
You can politely ask them and explain your reason, such as resolving a dispute. But they are not legally obliged to share unless it captures public areas or infringes on your privacy.
If refused, you may escalate to the ICO if misuse is suspected. For criminal matters, make sure to involve the police. Additionally, mediation services can help resolve civil disputes amicably.
How long do CCTV operators in the UK keep recordings?
UK CCTV operators typically retain footage for around 31 days. This is to balance storage costs with investigative needs, as recommended by the ICO and police.
High-risk locations, such as transport hubs, may store footage longer, sometimes up to 90 days. Data can not be kept indefinitely to comply with GDPR’s minimisation principle.
Check the operator’s policy. Usually, footage is automatically deleted or overwritten unless flagged for incidents or ongoing investigations, so act quickly if you need access.
Are there fees associated with requesting CCTV footage of someone else?
Standard DSARs for your own personal data are usually free, with operators providing footage within one month at no cost.
Councils often charge significant fees for searching public CCTV (road, car park, etc.), covering search and release, which can run into hundreds of pounds.
Exemptions exist for unreasonable requests. Always confirm fees in advance, as excessive charges might be required through the ICO to ensure compliance with data protection rules.
