Do I need planning permission or GDPR signage for CCTV?

For most homeowners in England, a domestic CCTV system does not need planning permission. It is normally considered permitted development provided the equipment is small, mounted in a way that minimises its visual impact, and not on a listed building.

The exceptions are what catch people out. Flats and maisonettes have far more limited permitted development rights, and mounting cameras on the outside of a flat can require consent. Listed buildings almost always need listed building consent for external fixtures, and conservation areas can restrict what is fixed to a front elevation. If you rent, the tenancy agreement matters more than planning law.

Commercial CCTV generally falls under permitted development too, but buildings in sensitive locations — conservation areas, near a highway, or in a mixed residential block — may need an application. Where the work involves significant external changes, such as large camera housings or new poles, a lawful development certificate is a cheap way to confirm your position.

If you are unsure, ask the local planning authority in writing before installing. In Bradford that is Bradford Council; the same applies in Leeds, Calderdale, Kirklees and Wakefield. A short email now is far cheaper than removing a system later.

Domestic CCTV that stays within your own property boundary is exempt from UK GDPR. The moment a camera overlooks a public pavement, a shared driveway or a neighbour's garden, you are processing other people's personal data and the rules apply.

The ICO expects a clearly visible sign at the entrance to the area covered, telling people that recording is taking place, who is responsible and how to contact them. A generic 'CCTV in operation' sticker is not enough on its own for a business — a small sign or a laminated notice with the organisation name and contact details is.

We position and mask cameras so they cover your property rather than the neighbours'. Most modern cameras let us blank off an area in the image, which is a simple way to avoid disputes.

We turn off audio by default. Recording conversations adds a second, more sensitive category of data and is almost never necessary for security.

We agree a retention period. Thirty days is typical for a home, longer for a business with an insurance requirement. Keeping everything forever is a liability rather than a safeguard.

• Sign at the entrance, not just on the camera
• Name the organisation and give a contact route
• Mask neighbouring windows and gardens
• Record audio only if there is a genuine reason
• Set a retention period and stick to it

If you run a business, CCTV should appear in your privacy notice, along with the purpose, retention period and who to contact. Subject access requests — someone asking for footage of themselves — must be handled within one month. A competent installer will tell you how to export footage and confirm the system clock is accurate, because an inaccurate timestamp undermines everything.