CCTV in Communal Flats and Other Areas: What Are the Rules?

Landlords, property management companies, and owners often recognise the benefits of CCTV surveillance in communal areas to protect tenants and monitor for suspicious behaviour. Buy CCTV in communal flats is governed by the UK Data Protection Act 2018 and the GDPR, which require anyone operating cameras in shared spaces to register as a data controller with the Information Commissioner’s Office (ICO).

In simpler terms, landlords can install CCTV in communal areas, but they must follow specific rules to protect tenants’ privacy and handle footage responsibly.

However, this contrasts with the duty landlords have to respect tenants’ privacy and adhere to data protection regulations, which means they must follow several steps to ensure their CCTV is lawful, properly managed, and compliant with all the relevant standards.

Here, we explain the rules related to communal areas, such as shared entrances, hallways, facilities, and spaces in residential blocks of flats, shared commercial spaces, and any other building where tenants can use an amenity without having exclusive usage rights.

Key Takeaways

• Landlords and building managers can install CCTV in communal areas such as hallways, car parks, and lobbies, but must register with the ICO as a data controller and clearly define the purpose of the surveillance.
• Tenants must be informed about CCTV through visible signage that states the reason for recording and the data controller’s contact details, as required by the GDPR.
• A Data Protection Impact Assessment (DPIA) should be completed before installation to ensure the CCTV is proportionate and does not unnecessarily intrude on residents’ privacy.
• Ring doorbells and similar consumer devices in communal areas are subject to the same data protection rules as professionally fitted CCTV systems.

Recapping the Primary Rules for CCTV in Communal Areas

• Landlords and building managers are entitled to install CCTV in communal areas if they wish. Most do so to augment security and protect tenants using areas like car parks, stairways and lobbies.
• To comply with data protection laws, they must define the CCTV’s purpose, communicate this with tenants, and create policies that set out how data will be used, stored, accessed, and managed.
• Regardless of how crucial CCTV surveillance might be, the responsible party must follow all the requisite steps. Even though cameras might be outside of a living space, there is still a very real potential to breach personal data protection and human rights legislation, which can carry significant liabilities.

Anyone operating CCTV that captures footage beyond their own property boundaries must register with the ICO as a data controller, which costs £35 per year for most small organisations. This applies equally to landlords, freeholders, and property management companies overseeing communal areas in blocks of flats.

It is also worth noting the distinction between leaseholders and freeholders. Leaseholders typically need consent from the freeholder before installing any CCTV in communal spaces, as their rights over common areas are limited by the terms of the lease. Freeholders and managing agents, on the other hand, have the authority to install CCTV in shared areas, provided they meet all data protection obligations.

Understanding the Data Protection Rules for CCTV in Shared Spaces

CCTV cameras are a great way to deter unwanted and illegal activities and protect the welfare of residents, delivery people, and personnel such as maintenance teams and cleaners who access communal spaces. Shared areas are also commonly easier to access than individual apartments, units, or flats.

The complexities arise because, according to the Information Commissioner’s Office (ICO) definitions, the videos, still images and audio collected through a CCTV system constitute personal information, which means that, in the first instance, the person installing the cameras must register with the ICO as a data controller.

This process requires the responsible party to share information about where, why and how they are using CCTV and managing personal data, with regulations that mean they must:

• Communicate the presence of CCTV to all relevant parties, with signage showing that recording is taking place and the contact information for the data controller.
• Explain the justification for the CCTV and ensure that only recordings relevant to that purpose are kept, with controlled access, which means anybody without authority cannot access personal data about any individual.
• Create policies and procedures outlining how recordings will be deleted, the scenarios in which they might be shared, and with whom.
• Respond to subject access requests within one month, as individuals have the right to request copies of any footage containing their personal data.

Informing tenants is critical because putting up CCTV cameras without notifying those affected could both breach the regulations and give rise to disputes if there is any perception that cameras are being used to infringe on privacy, record activities outside of the intended use, or affect the rights of tenants to go about their usual routines without being scrutinised.

Daniel Meeajane, Business Development Director at Clearway, says: ‘The most common issue we see with communal CCTV is landlords not realising they need to register as a data controller. It is a straightforward process, but missing that step means the entire system is non-compliant from day one, regardless of how well the cameras are positioned or how securely footage is stored.’

Get Professional CCTV Advice for Your Communal Property

Clearway provides CCTV solutions for flats and apartments with full compliance support. Whether you manage a single block or a portfolio of properties, our team can advise on camera placement, data protection obligations, and ongoing monitoring.

Speak to our team

How Privacy Impact Assessments Apply to Communal CCTV

A privacy impact assessment is similar to any other risk assessment in that it provides a structured way for landlords or building managers to detail what they are trying to achieve with the installation of CCTV and how that could potentially impact their tenants or other building users.

For example, if a landlord were to install CCTV to deter fly-tipping and waste dumping in a front garden, they might need to consider the following points:

• How likely it is that the CCTV will capture various types of unrelated activities, such as residents coming and going, putting their bins outside, answering the door, and receiving deliveries.
• How to ensure the CCTV is proportionate, pointing only at the necessary areas and not recording anything irrelevant to the purpose of the surveillance.
• Timings, such as whether their cameras should be on continuously, motion-activated or only live overnight, especially if the majority of incidents occur during the hours of darkness.
• Whether cameras will capture audio or only images, and the best places to install signage at every entry point to the area being filmed, to ensure anybody entering knows there is CCTV covering the area.

Provided there is a legitimate reason for the CCTV, tenants are aware of its usage and parameters, and sufficient thought has been given to ensure this isn’t a privacy breach and that any personal data will be disregarded, deleted, or stored according to ICO and data protection regulations, the landlord will have fulfilled their obligations.

The UK Government’s guidance on domestic CCTV provides further detail on conducting these assessments and understanding when a formal Data Protection Impact Assessment is required under the GDPR.

Steve Hardcastle

Chief Technical Officer
Clearway

Steve Hardcastle

CCTV in communal areas must balance security with privacy rights-landlords need to register with the ICO as data controllers and ensure signage clearly informs residents they're being monitored, or they risk breaching GDPR and facing enforcement action.

Ring Doorbells vs Professionally Fitted CCTV in Communal Areas

As security specialists with decades of experience, we often speak with clients who need independent advice. We ensure the use of the best-value CCTV with all the performance features they need and don’t run the risk of falling foul of data privacy legislation.

However, landlords and building managers could still commit a data protection breach inadvertently, often by installing Ring doorbells and similar devices without professional input.

Police forces often advocate for using either CCTV or video-capture doorbells. They are a great way to capture information that later becomes important in identifying and apprehending criminals. Still, the legalities and data protection rules also apply.

If the landlord, for example, installs this type of doorbell, they will still need to meet all of the above requirements, such as specifying the use of any stored recordings, having a system to ensure information is handled securely and is not accessible to anybody else, and having a policy that sets out the lawful, transparent, and responsible use of data captured.

A key consideration is that consumer devices like Ring doorbells often capture wider angles than intended, potentially recording neighbours’ doorways and communal corridors. Unlike professionally installed systems, consumer devices may not offer the same level of control over recording areas, storage duration, or access management, which makes compliance more difficult without expert guidance.

Of course, the ideal is to use a professionally fitted CCTV system with advanced capabilities and straightforward data protection compliance, but in any case, you should be conscious of the implications of the Data Protection Act and seek advice if you have any concerns or doubts about whether your communal space CCTV is in full adherence. For further guidance on CCTV rules and regulations, including what the law says about CCTV usage, see our detailed guides.

Conclusion

CCTV in communal areas of flats and shared buildings provides real security benefits, but landlords and property managers must balance those benefits with their data protection obligations. Registering as a data controller, completing a privacy impact assessment, informing tenants through clear signage, and managing footage responsibly are all essential steps.

Whether you are considering CCTV for a single block of flats or managing security across multiple properties, professional advice ensures your system is compliant from the outset and delivers the protection your residents need.

Contact Clearway to discuss CCTV options for your communal property.

FAQs

Can landlords put CCTV cameras in communal areas of flats in the UK?

Landlords and freeholders can install CCTV in communal areas such as hallways, lobbies, car parks, and stairways. They must register with the ICO as a data controller, display signage informing residents that recording is taking place, and create policies explaining how footage will be stored, accessed, and deleted. Leaseholders typically need the freeholder’s consent before installing cameras in shared spaces.

Do you legally have to tell people there is CCTV in a communal area?

The GDPR and Data Protection Act 2018 require anyone operating CCTV that captures personal data to inform individuals that recording is taking place. In communal areas, this means displaying clear signage at every entry point that states the purpose of the CCTV, the identity of the data controller, and contact details for further information.

What is a Data Protection Impact Assessment for communal CCTV?

A Data Protection Impact Assessment (DPIA) is a structured process that helps landlords evaluate how CCTV installation in communal areas could affect tenants’ privacy. In practice, it involves documenting the purpose of the surveillance, assessing whether the cameras are proportionate to the security need, and identifying measures to minimise unnecessary data collection.

Are Ring doorbells subject to CCTV rules in communal flats?

Ring doorbells and similar video doorbell devices are subject to the same data protection rules as any other CCTV system when they capture footage beyond the owner’s private property. In communal flats, where a doorbell camera often records shared hallways or neighbouring doors, the device owner must comply with GDPR requirements, including registering as a data controller and managing footage responsibly.

Is it illegal to record audio with CCTV in communal areas?

Recording audio with CCTV in communal areas is not automatically illegal, but it is considered more intrusive than video recording alone and requires stronger justification. The ICO advises that audio recording should only be used when there is a clear and specific need, and the data controller must be able to demonstrate that audio capture is proportionate to the stated purpose.

Written by Daniel Meeajane

Business Development Director, Clearway Fire and Security

View Daniel’s LinkedIn profile More articles by Daniel

Daniel Meeajane is Business Development Director at Clearway Fire and Security, bringing strong commercial expertise alongside a detailed understanding of fire protection systems and industry standards.

Having contributed to a number of major projects and delivered successful outcomes, Daniel uses his knowledge and experience to drive awareness of effective fire protection solutions across a wide range of environments. His approach combines relationship-led business development with a clear understanding of technical compliance, operational requirements, and customer risk.

Daniel has a strong understanding of BS 5839-1, recognising the importance of compliant fire detection and alarm system design, installation, commissioning, and maintenance. He also keeps pace with the latest developments in fire technology, ensuring clients benefit from informed guidance, up-to-date solutions, and best practice across every stage of delivery.