Are CCTV Cameras Allowed in Toilets?

In the UK, it is not explicitly illegal to have cameras in toilets, but it is highly restricted and generally considered a violation of privacy laws (Data Protection Act/GDPR) to have them in private, intimate areas.

CCTV shouldn’t be running in areas considered private, such as in toilets and changing rooms. Using CCTV here wouldn’t usually be fair or proportionate, meaning it wouldn’t be compliant with data protection law.

There are some less usual circumstances where CCTV has been used in areas generally regarded as confidential. This is usually in extreme situations where public toilets have been targeted by criminal activity, repeated violence or drug offences.

We’ll run through the key legislation that sets guidelines for the use of CCTV cameras in toilets and explore ways organisations can enforce security measures without infringing privacy.

What Does UK Law Say About Using CCTV in Toilets?

Part of the reason recording in some public bathrooms has been allowed is a lack of clear guidance, as there is no specific piece of legislation that explains when and why CCTV cameras might be deemed necessary.

However, there are several regulations that businesses need to be aware of that effectively restrict the usage of CCTV in toilets. [2]

What Are the Rules for Using CCTV Cameras?

There are different CCTV rules depending on whether the setting is a private business, a residential home or a public access site, and the following apply to commercial CCTV applications:

1. Businesses must register with the ICO and give a reason for CCTV surveillance.
2. Privacy Impact Assessments must be published, along with a contact within the company responsible for handling enquiries or complaints.
3. CCTV should be clearly signposted, and staff should be advised of the policies in place related to CCTV recording.
4. Footage must be kept secure and deleted promptly when no longer required.
5. Conversations should not be recorded between members of the public.
6. CCTV should not generally be installed in places deemed private, such as toilets and changing rooms.
7. Dates and times should be programmed correctly, and databases for references and cross-checking must also be accurate.
8. CCTV operations should be audited and updated periodically as needed, and the findings should be stored for future reference.

While this seems clear, there are difficulties.

Although no security adviser would recommend installing CCTV in toilets, changing legislation, especially the introduction of Martyn’s Law for event venues, may create pressure to adopt more comprehensive surveillance across large-scale sites.

What Are the Repercussions for Using CCTV in Toilets?

Data protection complaints can carry serious ramifications, and alongside reputational damage, staff dissatisfaction and a sense of distrust, organisations that breach data protection laws can face:

• Considerable fines, with the maximum penalties enforceable by the UK extending up to £500,000
• Criminal charges based on harassment or voyeurism, as governed by the Sexual Offences Act 2003
• Civil cases and lawsuits, with employees or individuals potentially able to claim damages for invasions of privacy

Tribunals, court cases, and investigations are clearly undesirable, which is why it’s never worth installing CCTV anywhere perceived as private without carefully reviewing the use case for doing so.

Steve Hardcastle

Chief Technical Officer
Clearway

Steve Hardcastle

CCTV in toilets and changing rooms will almost always fail a data protection impact assessment because the intrusion into people's privacy cannot be justified by any legitimate security need-the fairness and proportionality test simply doesn't stack up against the sensitivity of these spaces.

What Are the Options for Protecting Toilets Without CCTV?

“Putting CCTV anywhere where staff, visitors or members of the public can reasonably expect privacy is strongly inadvisable.”

That doesn’t mean there is any expectation that facilities, sites and businesses need to resign themselves to allowing criminal activity to continue unaddressed. The best advice is to reach out to an independent professional who can offer reliable guidance.’

Fortunately, there are numerous resolutions that businesses and public sector bodies can adopt, including intelligent monitoring, which can proactively identify when suspicious behaviour requires investigation.

That could mean installing AI-enabled cameras outside bathrooms or in entrance lobbies that prompt security guards to verify whether a person has authorisation to be there or is legitimately using the bathroom facilities.

There are also several types of CCTV cameras that support access control solutions, where toilets are accessible only to verified staff or users who have been issued a key fob or pass. These cameras are installed around bathroom entrances rather than inside.

In every case, professional oversight is essential and will ensure that bathrooms remain private and controlled, without any confusion about how, where and why CCTV is in operation.

Frequently Asked Questions

Why Can’t Businesses Install CCTV Cameras in Urinals?

Even though the business might own a bathroom, the management and owners have a responsibility to protect and respect the privacy of anyone who might use it. This is why data protection laws exist.

Surveillance is typically deemed as intrusive and unreasonable, and could even be considered a crime if there are grounds for a legal complaint about voyeurism.

What Laws State That CCTV Can’t Be Fitted in Toilets?

As we’ve seen, there is ambiguity because legislation doesn’t expressly forbid CCTV from ever being used in any bathroom.

The essential aspect is whether there is a justifiable use; CCTV can be proven to be proportionate and isn’t deemed a breach of data protection regulations, which in most cases it will be.

When Can CCTV Cameras Be Fitted in Toilets or Changing Rooms?

There must be exceptional grounds for the use of active surveillance in a private space, such as persistent and demonstrably serious violence or use of drugs, and even in these circumstances, alternative measures may be more advisable.

Written by Steve Hardcastle

Chief Technical Officer

View Steve’s LinkedIn profile More articles by Steve

Steve Hardcastle is Chief Technical Officer at Clearway, bringing extensive leadership experience from across the security sector, including the management of NSI and ACS-accredited businesses and the founding of Cerberus Security and Monitoring, which he led for over 25 years.

Working closely with Clearway’s research and development team, Steve helps shape the Group’s technical direction by identifying innovative technologies that enhance service capability, support operational performance, and provide a competitive advantage. His role includes developing technology strategies that support business growth, while also strengthening and evolving the Group’s existing product range.

Steve also provides technical and practical support across the wider business, working with sales, marketing, and operational teams on solution design, product positioning, implementation challenges, and day-to-day technical issues. His broad industry knowledge and hands-on approach play an important role in ensuring Clearway remains at the forefront of security technology and service innovation.