Last updated: June 2026
Schools in the UK operate CCTV under a stricter framework than most other environments because the subjects are children, who have enhanced data protection rights under UK GDPR and the Data Protection Act 2018. The balance between safeguarding (protecting children from harm) and privacy (protecting children from unnecessary surveillance) is delicate, and several high-profile ICO enforcement actions have resulted from schools getting this balance wrong.
The Legal Framework for School CCTV
The primary legal basis for school CCTV is legitimate interest for safeguarding purposes, but this requires a Legitimate Interest Assessment (LIA) that is more rigorous than for general premises CCTV. The LIA must explain why CCTV is necessary for safeguarding, what specific risks it addresses, and why less intrusive measures are insufficient. The Department for Education’s guidance on school security and the ICO’s guidance on CCTV in schools both emphasise that CCTV should be used only where there is a specific, documented safeguarding risk, not as a general surveillance tool. Schools that install CCTV “just in case” without a documented risk assessment are likely to be non-compliant.
Areas Where School CCTV Is Prohibited or Restricted
CCTV must never be installed in areas where children undress or change clothes: changing rooms, swimming pool changing areas, toilet cubicles, and sick bay curtains. Cameras in corridors outside these areas must be positioned so they cannot see inside when doors are opened. CCTV in classrooms is restricted: the ICO considers that recording of teaching and learning activities requires consent from both teachers and parents, which is impractical to obtain. Classroom CCTV is only justified where there is a specific, documented safeguarding risk that cannot be addressed by other means, such as a history of assaults on staff in a particular classroom.
Retention, Access, and Subject Access for School CCTV
School CCTV footage of children is subject to an enhanced retention duty: footage must be retained only as long as necessary for the specific purpose identified in the LIA. Retention beyond 31 days requires documented justification. A child or their parent can make a Subject Access Request for CCTV footage. The school must respond within one month and may need to balance the child’s right to access against the rights of other children visible in the footage. Redaction of other children is required, which can be technically challenging for busy school corridors or playground footage. Schools should budget for occasional redaction service costs of £100–£500 per SAR.
Staff Rights and Union Consultation
Before installing CCTV in non-classroom staff areas (staff rooms, offices, workrooms), the school must consult with recognised trade unions or staff representatives under Section 2 of the Employment Practices Code. The consultation must cover: the purpose of the CCTV, the locations, the retention period, who has access to footage, and the process for handling complaints. Staff have the right to know they are being recorded and the purpose of the recording. Covert monitoring of staff is prohibited except under the same strict conditions as covert monitoring in any workplace: documented suspicion of criminal activity, senior authorisation, and time limitation.
Video: Apple HomeKit Secure Video Beginners Guide! (2024)
Frequently Asked Questions
1. Can schools have CCTV in classrooms?
Answer: Generally no, unless there is a specific, documented safeguarding risk that cannot be addressed by other means. The ICO considers classroom CCTV a significant intrusion that requires consent from teachers and parents. For more detail, see How to maintain Home WiFi CCTV systems - UK guide 2026. Also read our related guide: Gym Privacy: CCTV Rules for Changing Rooms and Exercise Areas. Browse our security technology hub at Uni Blog Security Hub. Official UK guidance on this topic: Surrey Security Centre.
2. Is it legal to have CCTV in school changing rooms?
Answer: No. CCTV is strictly prohibited in any area where children undress: changing rooms, swimming pool changing areas, toilet cubicles, and sick bay curtains. This is an absolute prohibition. For more detail, see How to install CCTV for Warehouses and Logistics - UK step by step guide 2026. Also read our related guide: Office Covert Monitoring: What Is Illegal in UK Workplaces.
3. How long can a school keep CCTV footage?
Answer: Only as long as necessary for the specific safeguarding purpose identified in the Legitimate Interest Assessment. 31 days is typical for general footage, but some safeguarding investigations may require longer retention with documented justification. For more detail, see How to maintain Pubs, Bars and Restaurants CCTV systems - UK guide 2026. Also read our related guide: Car Park CCTV: ANPR Requirements for UK Operators.
4. Can parents request school CCTV footage of their child?
Answer: Yes, through a Subject Access Request under UK GDPR. The school must respond within one month and provide footage of the child, with other individuals redacted. The school can charge a reasonable fee for excessive redaction work. For more detail, see Future of Retail Shops and Stores CCTV in 2026 - UK trends and technology. Also read our related guide: Hikvision vs Dahua Ecosystem Comparison.
5. Do schools need to consult staff before installing CCTV?
Answer: Yes. Under the ICO’s Employment Practices Code, schools must consult with trade unions or staff representatives before installing CCTV in staff areas. The consultation must cover purpose, locations, retention, and access policies. Also read our related guide: Reolink vs Annke: Value Proposition for UK Users.
Conclusion
The difference between a security system that works and one that frustrates is understanding the real-world behaviour of cameras, cables, and the environment they operate in. Manufacturers sell specifications. Installers solve problems. The questions above represent the issues that UK homeowners and businesses actually face — the ones the spec sheets do not mention.
Article by Gary Pearce, qualified security systems engineer. For a free security assessment, visit gary-pearce-home-services.pages.dev. This guide was last updated June 2026. Verify current UK regulations with the ICO.