CCTV and Covert Surveillance in Care Homes: A Practical Guide

Cameras in care homes raise a genuine tension that doesn't have a single right answer: they can protect residents from abuse and neglect, provide reassurance to families, and support investigations when something goes wrong — but they also intrude on the privacy and dignity of people receiving intimate personal care in what is, for them, their home. Getting the policy right matters both legally and for the trust a home builds with residents and staff.

Communal Areas Versus Private Rooms

The starting distinction is where a camera is placed. CCTV in communal areas — corridors, lounges, entrances, car parks — is broadly similar to any other public-facing premises and is generally lawful provided it's proportionate, signposted, and registered appropriately under UK GDPR, with the home acting as data controller. Cameras inside a resident's own bedroom or bathroom are a fundamentally different matter: these are private spaces where residents have a reasonable expectation of privacy, and filming there — even with good intentions — requires individual consent or a best-interests decision under the Mental Capacity Act if the resident lacks capacity to decide for themselves.

When Families Want to Install Their Own Cameras

A growing and often difficult scenario is a family member wanting to install a covert camera in a relative's room, usually out of concern about care quality. Care homes cannot simply refuse this outright — the ICO's guidance recognises that a family acting on a resident's behalf, or with their consent, has a legitimate basis for doing so, particularly where the resident lacks capacity and the family is exercising a reasonable safeguard in the resident's best interests. What the home can and should do is have a clear policy setting expectations: the camera should be disclosed, not truly covert, wherever practically possible; other residents and staff who might be filmed incidentally need to be considered; and footage capturing other people's care shouldn't be shared or used beyond its original safeguarding purpose.

The Case for Genuinely Covert Surveillance

Truly covert surveillance — installed without any staff or resident knowledge, specifically to catch suspected wrongdoing — is a much higher-risk step, both legally and practically. It should only be considered where there's a specific, reasonable suspicion of abuse or neglect that can't be investigated another way, ideally in consultation with the local authority safeguarding team or, in serious cases, the police, and the decision and rationale should be documented. Covert surveillance used routinely or speculatively, without a specific triggering concern, is much harder to justify under data protection law.

Data Protection Obligations

Any CCTV system, whether covering communal areas or agreed for a private room, needs to sit within the home's wider data protection framework: clear retention periods (footage shouldn't be kept indefinitely), restricted access to recordings, a documented lawful basis, and appropriate signage informing people that recording is taking place, except in the specific covert investigation scenario described above. A data protection impact assessment is good practice for any new or expanded CCTV deployment, particularly one that could capture care being delivered to multiple residents.

Staff Awareness and Working Under Camera

Staff should understand that being filmed while delivering personal care isn't a punitive measure or a sign of distrust in them individually — it's a safeguard that exists for residents' protection and, just as often, protects staff themselves from unfounded allegations. A home with a clear, well-communicated CCTV and covert surveillance policy tends to see less anxiety among staff than one where cameras appear without explanation or consistent rules.

Building a Clear Policy

A good CCTV and surveillance policy should cover where cameras are and aren't permitted, how family-installed cameras are handled, the threshold and process for the home initiating covert surveillance in response to a specific concern, retention and access rules for footage, and who residents or families can raise questions with. Reviewing this policy periodically, and against actual ICO guidance updates, keeps it defensible if it's ever tested.

Frequently Asked Questions

Can a family install a hidden camera in a relative's care home room?
Generally yes, particularly where the resident lacks capacity and the family is acting in their best interests, but the home should have a policy setting expectations around disclosure and appropriate use of footage.

Do care homes need consent to use CCTV in communal areas?
Communal-area CCTV doesn't require individual consent in the same way private-room filming does, but it must be proportionate, signposted, and registered under UK GDPR with a documented lawful basis.

When might a care home use genuinely covert surveillance?
Only in response to a specific, reasonable suspicion of abuse or neglect that can't be investigated another way, ideally in consultation with safeguarding teams, with the decision documented.

This sits within the home's wider data protection obligations covered in our guide to subject access requests and GDPR, and connects to the broader information governance practices in our Cyber Essentials and data security guide. For structured training on safeguarding and data protection, see Learnsignal's CPD courses.