Last updated: June 2026
Your neighbour emails you requesting all CCTV footage that shows their property or family. You ignore it because you do not think a domestic CCTV owner needs to comply with 'corporate GDPR nonsense'. Six months later, you receive a letter from the ICO. Then a claim from the neighbour. The total cost of ignoring that email can exceed GBP 9,000 in legal fees, ICO enforcement costs, and court-ordered damages. Ignorance of the law is not a defence, and the Fairhurst v Woodard precedent has made neighbour CCTV claims increasingly common.
What a Subject Access Request Actually Requires
Under Article 15 of UK GDPR, any individual has the right to request copies of their personal data from any data controller. If your CCTV camera captures footage of your neighbour's property, your neighbour's personal data is in your possession. You become a data controller, and you must respond to a SAR within one calendar month.
The SAR must be in writing (email is valid). You cannot charge for responding. You must provide all footage containing the requester's image, or explain why you cannot. You must respond within 30 calendar days. There is no exemption for 'domestic use' when the camera captures beyond your property boundary.
The Cost of Ignoring
Month 1: Neighbour sends SAR. You ignore it. Month 2: Neighbour sends reminder. You ignore it. Month 3: Neighbour complains to ICO. You receive an ICO enquiry letter. Estimated cost of responding: 0 (your time plus a written explanation). Month 4-6: ICO enforcement process begins. Legal advice: GBP 200-500 per hour. Month 7-12: ICO issues enforcement notice. Court proceedings begin. Legal fees: GBP 3,000-8,000. Month 13+: Court orders damages. Fairhurst v Woodard awarded damages and costs. Potential total: GBP 5,000-20,000.
Responding to the original SAR costs nothing and takes one hour. Ignoring it costs thousands.
The Legal Reason You Must Respond
The ICO has the power to issue enforcement notices requiring compliance with a SAR. Failure to comply with an enforcement notice is a criminal offence under Section 144 of the Data Protection Act 2018. This is not a civil matter — it is criminal law. The maximum penalty is an unlimited fine in Crown Court.
In practice, the ICO issues warnings before pursuing criminal sanctions. But the escalation chain is clear: SAR ignored, ICO warned, enforcement notice issued, non-compliance = criminal record. No UK homeowner wants to explain to a mortgage lender why they have a criminal conviction for data protection offences.
How to Respond Correctly
Step 1: Acknowledge receipt within 48 hours. Step 2: Review footage within 7 days and extract any clips containing the requester. Step 3: Provide the footage in a standard video format (MP4). Step 4: If the footage contains other identifiable people, redact (blur) their faces before sharing. Step 5: Document everything.
If you do not have footage of the requester, tell them within 30 days. If you have footage but cannot provide it for a specific legal reason, explain that reason. Non-response is not an option.
Video: Installation Tips For Outdoor Wired WiFi Security Cameras — a practical walkthrough of the technology discussed in this guide.
Frequently Asked Questions
1. Do I have to respond to a SAR if my camera only records when motion is detected?
Answer: Yes. If your camera has ever recorded footage containing the requester — even if that footage has been automatically deleted — you must confirm whether you hold the data. If the footage has been deleted through normal operation, inform the requester of your retention policy. For more detail, see Future of Hotels and Hospitality CCTV in 2026 - UK trends and technology. Also read our related guide: The Data (Use and Access) Act 2025: What UK Home CCTV Owners Must Know About the New Law That Changed Everything. Browse our comprehensive CCTV knowledge base at CCTV Systems Guide. Official UK guidance on this topic: SSAIB.
2. Can my neighbour request footage of them on my property?
Answer: Yes. If your camera captures your own driveway and your neighbour walks onto it, they can request footage of themselves on your property. The SAR covers their personal data wherever it is captured, including your private property. For more detail, see How to maintain Retail Shops and Stores CCTV systems - UK guide 2026. Also read our related guide: Listed Building Consent vs CCTV: The Conflicting Regulations That Trap UK Homeowners in a Legal Catch-22.
3. Do I need to keep CCTV footage specifically to comply with SARs?
Answer: No. You can delete footage according to your normal retention schedule. You are not required to retain footage in anticipation of SARs. However, deleting footage after receiving a SAR in order to avoid providing it is a criminal offence (destruction of evidence). For more detail, see Does Care Homes and Assisted Living CCTV reduce insurance premiums in 2026? UK guide. Also read our related guide: Council House CCTV: The Often-Overlooked Rules That Apply to Social Housing Tenants and Landlords.
4. Can I charge my neighbour for providing CCTV footage?
Answer: No. SAR responses must be free unless the request is 'manifestly unfounded or excessive'. Charging is only permitted in exceptional circumstances and only after informing the requester. Standard practice is always free. For more detail, see Warehouses and Logistics CCTV - UK legal requirements and GDPR compliance 2026. Also read our related guide: Why Your PoE Camera Reboots When Night Vision Activates — The Voltage Drop Problem Nobody Warns You About.
5. Does my response timeline change if the SAR is sent during holidays or weekends?
Answer: The 30 calendar day clock starts on the day the SAR is received, regardless of holidays or weekends. If you receive a SAR on December 24, the response is due by January 23. Plan your response timeline accordingly. Also read our related guide: The Spider Web Problem: Why Your Night Vision CCTV Captures Nothing But Glowing Blur and What Actually Works.
Conclusion
The difference between a security system that works and one that frustrates is understanding the real-world behaviour of cameras, cables, and the environment they operate in. Manufacturers sell specifications. Installers solve problems. The questions above represent the issues that UK homeowners and businesses actually face — the ones the spec sheets do not mention.
Article by Gary Pearce, qualified security systems engineer. For a free security assessment, visit gary-pearce-home-services.pages.dev. This guide was last updated June 2026. Verify current UK regulations with the ICO.