CCTV in Schools – What Are the Rules?

CCTV surveillance has become increasingly prevalent in the education sector. Schools and other campuses install advanced camera systems to improve security, deter unwanted behaviour, improve site management and health and safety, and as part of staff access controls. But what are the rules of CCTV usage in schools?

The main rules governing the use of CCTV in school settings include the Human Rights Act (1998) and the Data Protection Act (2018 UK GDPR). 

School leaders must ensure they take the right steps to protect the rights and privacy of students, staff, and visitors both when fitting a new CCTV system and when managing its use over time.

Clearway’s experienced educational security specialists can provide more tailored guidance on request, but in today’s guide, we’ve clarified some of the many aspects to consider regarding the use of CCTV in schools.

A Summary of the Rules for CCTV in Schools:

• Schools, colleges, and nurseries use CCTV for a wide range of reasons, but they also need to comply with regulations and produce a policy that sets out how, where, and why CCTV cameras are being used. This policy document should also define the purposes and objectives of their surveillance system.
• Some rules will depend on the nature of that surveillance, with additional requirements for any CCTV used to monitor individuals, who then have rights to access all the data held about them.
• The location of CCTV cameras must align with the surveillance’s stated intention. The school must also communicate the presence of CCTV coverage and ensure access to confidential data is properly managed and controlled.

The Legislation Relevant to School CCTV in the UK

Above, we mentioned two primary regulations related to school CCTV, and next, we’ll summarise the primary inclusions that schools need to be aware of, while noting this isn’t an exhaustive list. For a broader overview of CCTV legislation beyond schools, see our guide to the rules for CCTV.

Seeking advice before installing CCTV is strongly advisable since this can safeguard the school’s reputation, ensure there is no potential for improper or inappropriate use of CCTV, and verify that your security system meets your objectives while being compliant with every applicable standard.

Additional provisions may also be necessary in some circumstances, such as where schools need to consider supplementary security approaches, such as perimeter intrusion detection solutions or visitor management systems which guarantee that only verified staff can enter school buildings and gates.

The Data Protection Act and School CCTV

Data protection is all about safeguarding an individual’s right to privacy, how any personal data, including video footage, is collected, the purposes it can be used for, and who should have access to it. These requirements mean that:

• Each camera needs to be installed in a location that ties into the main objective of CCTV surveillance, along with signage and other communications, to ensure all pupils, staff, and site visitors are informed of the presence of CCTV and know what it is there for.
• CCTV policies are essential and set out all the rules around length of time the school will store each capture, the circumstances in which footage can be shared, especially with third parties, and the policy for obtaining consent from individuals featured in the footage.
• Schools may need to register with the Information Commissioner’s Office (ICO), lodging their intent to use CCTV and declaring themselves as data controllers—a person, authority, or organisation that collects or manages personal data.
• Individuals have a right to request access to any information stored about them. The deadline for providing access to that data is usually 30 days, and it should be free of charge to the person making the request.

Breaching data protection legislation can have serious ramifications, and if you are concerned about compliance or unsure whether your existing CCTV is fully adherent, we recommend contacting the Clearway team as soon as possible.

The Role of the Human Rights Act in Regulating School CCTV Systems

Our next piece of legislation is the Human Rights Act, which focuses on the responsible use of surveillance, entitlements to freedom of expression, and the right to privacy that everybody possesses. This legislation states that:

• CCTV must be used proportionally and only as necessary.
• For example, a CCTV system to enhance perimeter security would be considered proportionate if cameras were installed covering all entrances and boundaries, whereas cameras in classrooms or changing facilities would not.
• Cameras should be located in places with a defined need that aligns with the school’s CCTV policies.
• There should be clear rules that outline how the system is used, for which purposes, the protocols in place that manage access to footage, and how often captures will be deleted.
• Anybody on site should be informed when and where CCTV is going to be used and given the right to object or raise concerns before additional surveillance is put in place.
• Data collected through school CCTV must be protected, without any potential for personal data to be altered, accessed by an unauthorised party, or destroyed outside of the rules set in the school policy.

In short, that means a school must have a method of securing access to devices or equipment that would enable a person to view personal data, with sufficient levels of encryption and controlled access rights to keep sensitive footage under continual management.

Summary – the do’s and don’ts of School CCTV

Dos

• Ensure Legal Compliance – Adhere to GDPR, Data Protection Act, and other relevant laws.
• Have a Clear Purpose – Use CCTV for security, safeguarding, and preventing vandalism, not for general surveillance of staff or students.
• Inform Stakeholders – Notify students, parents, and staff about CCTV use through clear signage and policies.
• Place Cameras Strategically – Position cameras in areas like entrances, corridors, and outdoor spaces while avoiding private areas.
• Store Footage Securely – Restrict access to authorised personnel and implement robust cybersecurity measures.
• Set a Retention Period – Keep recordings only for the necessary duration, typically 30 days unless needed for an investigation.
• Provide Access Rights – Allow individuals to request access to footage in accordance with data protection laws.
• Review Policies Regularly – Conduct audits to ensure compliance, effectiveness, and ethical use of CCTV.
• Limit Live Monitoring – Only permit real-time viewing where necessary for security purposes.
• Train Staff – Ensure personnel handling CCTV understand data protection regulations and privacy implications.

Daniel Meeajane

Business Development Director, Clearway

Daniel Meeajane

Schools must balance security objectives with privacy obligations under UK GDPR and the Human Rights Act – this means having a documented lawful basis for processing, conducting data protection impact assessments, and being transparent with staff, students and parents about where cameras are positioned and how footage is retained.

Don’ts

• Don’t Place Cameras in Private Areas – Avoid locations such as toilets, changing rooms, or staff break areas.
• Don’t Use CCTV for Classroom Monitoring – It should not be used to assess teacher performance or student behaviour unless absolutely necessary for safety. Similar rules apply to CCTV in the workplace.
• Don’t Record Audio Without Consent – Audio surveillance is highly intrusive and generally discouraged in educational settings. Learn more about whether CCTV can record audio.
• Don’t Share Footage Without Justification – Only share recordings with law enforcement or relevant authorities if legally required.
• Don’t Store Data Indefinitely – Delete footage within the agreed retention period unless needed for legal purposes.
• Don’t Allow Unauthorised Access – Ensure that only trained and approved personnel can view or manage CCTV footage.
• Don’t Install Hidden Cameras – Covert surveillance should only be used in exceptional cases where serious threats exist and legal permissions are in place.
• Don’t Ignore Complaints – Address concerns from students, parents, or staff about privacy and CCTV placement.
• Don’t Neglect System Maintenance – Regularly check and maintain cameras to ensure they function properly and comply with policies.
• Don’t Use CCTV as a Substitute for Supervision – It should complement, not replace, staff presence and safeguarding measures.

Understanding How to Install School CCTV Safely and Compliantly

The above legislation dictates some of the measures and controls schools need to consider, from locked offices and access controls to signage advising of the presence of CCTV and clear policies and statements about how and when surveillance is collected.

Policies must not allow for any level of ambiguity or arbitrary recording outside of the guidelines set, and these documents should be available to all parents, staff, and regular suite users, such as sports coaches or caterers.

Our advice for any school looking to install an innovative CCTV surveillance system is to schedule a good time to talk with the specialists at Clearway.

Alternatively, we can organise a site visit where we can review your current set up and offer guidance to ensure you are fully aware of all obligations and responsibilities linked to CCTV.

There is no reason a school cannot use powerful CCTV as a crime deterrent, but following all the above guidelines, ensuring CCTV footage isn’t kept indefinitely, and being mindful of privacy and data rights is essential.

Frequently Asked Questions About CCTV in Schools

Can schools use CCTV in classrooms?

Schools can only use CCTV in classrooms under exceptional circumstances where there is a specific and documented safety concern. Under the Human Rights Act and Data Protection Act 2018, classroom surveillance is generally considered disproportionate because it intrudes on the privacy of both students and staff during normal educational activities. Any classroom CCTV would require a clear justification, a formal Data Protection Impact Assessment, and consultation with all affected parties.

How long can schools keep CCTV footage?

Schools should retain CCTV footage for a maximum of 30 days under standard circumstances. The Information Commissioner’s Office advises that footage should only be kept for as long as it is needed to fulfil the purpose for which it was recorded. If footage is required for an ongoing investigation or legal matter, it can be retained for longer, but the school’s CCTV policy must clearly define retention periods and deletion procedures.

Do schools need to tell parents about CCTV?

Schools are legally required to inform parents, students, staff, and visitors about the use of CCTV on their premises. Under the Data Protection Act 2018, this includes displaying clear signage at all entry points, providing details within the school’s privacy notice, and making the full CCTV policy available on request. Parents also have the right to request access to any footage featuring their child, and the school must respond within 30 days.

Written by Daniel Meeajane

Business Development Director, Clearway Fire and Security

View Daniel’s LinkedIn profile More articles by Daniel

Daniel Meeajane is Business Development Director at Clearway Fire and Security, bringing strong commercial expertise alongside a detailed understanding of fire protection systems and industry standards.

Having contributed to a number of major projects and delivered successful outcomes, Daniel uses his knowledge and experience to drive awareness of effective fire protection solutions across a wide range of environments. His approach combines relationship-led business development with a clear understanding of technical compliance, operational requirements, and customer risk.

Daniel has a strong understanding of BS 5839-1, recognising the importance of compliant fire detection and alarm system design, installation, commissioning, and maintenance. He also keeps pace with the latest developments in fire technology, ensuring clients benefit from informed guidance, up-to-date solutions, and best practice across every stage of delivery.