Are Hallway Cameras Allowed in Apartment Buildings?

Hallway cameras can be allowed in apartment buildings, but they are not automatically lawful just because a landlord, residents’ association or managing agent owns the building. The decision needs a specific security purpose, proportionate camera coverage, clear responsibility for the footage and a routine for deleting it.

In the UK, identifiable CCTV footage is generally personal data. That means the organisation deciding why and how the cameras operate must consider data protection law, including the UK GDPR and the Data Protection Act 2018. The exact rules can depend on who operates the system, where it is installed and what it records. This article offers general information, not legal advice; check current guidance from the Information Commissioner’s Office (ICO) and seek advice for your circumstances.

The practical starting point is a question we ask whenever someone proposes a new camera: What security question does this camera answer? If nobody can give a clear answer, installing it “just in case” is a warning sign—not a sound basis for surveillance.

When might hallway CCTV be justified?

Apartment common area cameras may be justified where there is a defined and evidenced problem, such as repeated unauthorised entry, theft from a shared lobby or damage to communal property. A camera is more likely to be proportionate if the building has considered less intrusive measures first, such as repairing a faulty entry system, improving lighting or changing access arrangements.

“We want to see what is happening” is usually too vague. Record the concern, the incidents that support it and the outcome the camera is meant to achieve. Then consider whether a camera is necessary to achieve that outcome, rather than simply convenient.

A hallway is shared space, but it is also part of residents’ everyday lives. People may be recorded leaving home, receiving visitors, returning at night or accessing their front doors. A tenant privacy hallway camera assessment should take that context seriously. Residents and visitors can have a reasonable expectation that their movements will not be watched without a legitimate reason.

Who owns and governs the camera decision?

Before buying equipment or asking an installer for a quote, establish who has authority to approve the system. Depending on the building’s ownership and management arrangements, that might be a freeholder, landlord, residents’ management company, right-to-manage company, housing provider or another organisation. A managing agent may administer the system, but that does not automatically mean it has authority to decide its purpose.

The organisation that determines why footage is recorded and how it is used will commonly be the data controller. An installer or monitoring provider may act as a data processor if it handles footage on the controller’s instructions. The roles should be checked and documented rather than assumed. If several organisations make decisions together, they may need to clarify their responsibilities between them.

Good governance means deciding, in writing:

the specific security purpose for each camera;
who approved the installation and who is responsible for the system;
who can view live footage and who can retrieve recordings;
what lawful basis supports the processing, where required;
how residents and visitors will be informed;
how requests, complaints and footage disclosures will be handled; and
when footage will be routinely deleted.

For many private organisations, legitimate interests may be relevant as a lawful basis, but it is not a shortcut. The organisation should identify its interest, assess whether CCTV is necessary, and balance that interest against the privacy impact on residents and visitors. Keep a record of that assessment. A data protection impact assessment may be required where the proposed monitoring is likely to create a high risk to people’s rights and freedoms; even when it is not mandatory, an assessment can help expose problems before installation.

Camera placement and field of view matter

Hallway CCTV rules are not just about whether a camera is in a communal corridor. They are also about what it can see. The field of view should be limited to the area needed for the stated purpose. A camera intended to monitor a building entrance should not casually capture every front door, a neighbour’s private space or a large area of the street.

Ask the installer to demonstrate the actual view from the proposed position. A floor plan is useful, but it does not show exactly what the lens captures at different angles or in different lighting. Check the image on the installed system, not only on a design drawing, and record any privacy masking or other controls used.

Consider these placement checks:

Keep the view narrow: frame the entrance, access point or specific communal area relevant to the incident risk.
Avoid private areas: do not point a lens into flats or capture more of a resident’s doorway than the security purpose requires.
Check adjacent spaces: test whether the lens captures windows, neighbouring property, public pavements or areas beyond the building.
Disable unnecessary features: turn off audio recording, facial recognition, movement tracking or other functions unless there is a separately assessed and lawful need for them.
Review lighting and image quality: avoid recording a wider area merely to compensate for poor positioning or unsuitable equipment.

Audio is particularly intrusive. A camera that records conversations can collect far more information than a silent camera and can capture people who are not involved in any incident. Do not assume audio should be enabled by default. If it is proposed, require a clear justification and specialist advice before proceeding.

Tell people what is happening

People should not have to discover a camera by accident. Place clear signs where people can see them before entering the monitored area. A sign should identify the organisation responsible for the system, explain the purpose in plain language and provide a way to find fuller privacy information. The notice should not promise that a camera prevents crime or imply that every recording is routinely watched.

Residents should also be given more detailed information through an appropriate channel, such as a resident handbook, building portal or privacy notice. Explain what areas are monitored, how long footage is normally kept, who can access it, how to raise a concern and how people can make a data protection request. Where there are employees or contractors working in monitored areas, consider their information rights as well.

Access, exports and disclosure controls

Recorded footage is not a general-purpose viewing tool. Limit access to named, authorised people who need it for the building’s stated security purpose. Keep accounts individual, use strong authentication where available and retain an access log. Casual viewing, including checking who a visitor was or watching residents out of curiosity, is not acceptable.

When an incident occurs, record who reviewed the footage, why, which time period was checked and whether a clip was exported or disclosed. Before responding to a Click here for more info request from a resident or another person, assess the rights of everyone shown in the footage. A person may be entitled to request access to their personal data, but that does not mean they are automatically entitled to an unredacted copy showing other people. Appropriate measures may include blurring, masking or providing a carefully limited extract.

Always ask where exported clips end up and who can open them. A clip should not be emailed around, saved to a personal phone or placed in a shared folder without access controls and an expiry date. Use a secure, approved transfer method; record the recipient and purpose; restrict onward sharing; and set a deletion date for the export as well as for the original recording.

A practical redaction check should look beyond faces and number plates. Consider whether the clip reveals:

flat numbers, distinctive doors or personal belongings;
children, visitors or people who are not relevant to the request;
access codes, keys, security screens or other building vulnerabilities;
medical, caring or other sensitive circumstances visible in the scene; and
voices or other identifying details, if audio has been captured.

Retention periods and routine deletion

There is no single retention period that is right for every apartment building. Footage should be kept only for as long as necessary for the purpose it was recorded for. Setting an indefinite retention period “in case something happens” is difficult to justify. The controller should choose a short, documented routine period based on the building’s risks, the time needed to identify an incident and any applicable legal or operational requirements.

Configure the system to overwrite or delete footage automatically when that period ends, and check that the setting works. Document the retention period and review it if the purpose or risk changes. If a specific incident occurs, a relevant clip may need to be preserved while a complaint, investigation or legal process is handled. Isolate that clip from routine footage, restrict access, record why it is being kept and review the need to retain it. Do not use an incident as a reason to keep the entire building’s recordings indefinitely.

Situation Good practice Routine recordings Use a documented, limited retention period and automatic deletion or overwrite. Incident footage Preserve only the relevant extract, restrict access and review the retention reason. Exported clips Store securely, log who can access them, and set a separate deletion date. System changes Recheck camera views, access permissions and retention settings after changes or maintenance.

Common mistakes to avoid

Installing cameras “just in case”: define and evidence the security problem first.
Assuming a corridor has no privacy: residents still have privacy interests in shared areas close to their homes.
Using broad or poorly checked views: adjust the lens, use privacy masking and verify the live image.
Letting too many people watch: authorise access by role and keep a record of viewing and exports.
Keeping everything forever: set a routine deletion period and check it is actually applied.
Sharing raw clips by email: use a controlled transfer process and consider redaction first.

About prices: don’t mistake missing figures for a quote

A common mistake in scraped articles is to show no prices while still sounding as though the reader has been given a complete buying guide. There is no reliable universal price for hallway CCTV. Costs vary with the number of cameras, cabling, storage, access control, installation conditions, maintenance and any privacy or security features required. A price copied from another building may not be comparable.

Ask suppliers for itemised quotes that separate equipment, installation, storage, ongoing support and any optional monitoring. Discover more Confirm who owns the footage and accounts, what happens if the contract ends, and whether the provider can access recordings. But do not let a low quote set the privacy standard: first agree the purpose, camera views, governance and retention plan, then buy equipment that meets those requirements.

A practical approval checklist

Write down the specific security problem and supporting evidence.
Consider less intrusive ways to address it.
Confirm who has authority to approve the system and who will be responsible for it.
Assess necessity, proportionality and the impact on residents and visitors.
Agree camera positions, field of view, privacy masking and disabled features.
Publish clear signs and a fuller privacy notice.
Restrict and log access; define a secure process for requests and disclosures.
Set a limited retention period, automatic deletion and a separate process for incident clips.
Review the system regularly and remove cameras or features that are no longer justified.

So, are hallway cameras allowed?

They can be, when the responsible organisation can explain why each camera is necessary, keep its field of view proportionate, tell people about the monitoring, restrict access and delete footage on a defined schedule. The key is not simply whether the camera points at a communal hallway. It is whether the whole system respects people’s privacy while addressing a real and evidenced security need.

If a proposal cannot answer “What security question does this camera answer?”, or nobody can say where exported clips go and who can open them, pause the installation. Resolve those questions before recording residents’ daily movements.

Share this article

Share on Facebook | Share on X (Twitter)

Replace the example.com links with the published URL of this article before sharing.