This guide is for people who decide whether cameras go out at all. That usually means human resources and organisation leaders, data protection leads, operational managers, and whoever will own the footage as evidence. Typical readers work in housing, local authorities, enforcement, security, care and support, charities, trades and lone-working services.
The organisation is the controller. The person wearing the camera is not.
Name the country you work in. England, Wales, Scotland and Northern Ireland share much of UK data protection law. Sector powers, policing and some surveillance duties still differ. Ireland is not covered by the UK General Data Protection Regulation. Irish organisations follow the European Union General Data Protection Regulation, the Irish Data Protection Act 2018 and the Data Protection Commission. They do not follow the Information Commissioner's Office.
Staff who wear a camera also need this page, but they are not the first reader. Once policy exists, they need daily checks, a short announcement, and a fair-use promise they can trust. They should not be asked to invent the legal basis, retention rules or disclosure rules while they are on a visit.
Employer use of body-worn cameras. That includes purpose, necessity, a data protection impact assessment, lawful basis, overt and covert use, when to record, audio, homes and other private places, fair use for staff, what to say, storage, how long to keep footage, subject access and evidence.
This is not legal advice. It is not a police evidence manual. It does not give housing staff Police and Criminal Evidence Act powers, and it is not a reason to buy cameras. It does not tell you what to do when a resident, auditor or passer-by films your staff. It does not cover doxxing or online pile-ons.
Staff being filmed by other people is covered in Modern recording risks. Online targeting after an incident is covered in Workplace digital safety and online harassment. Duties and statutes in more depth sit in the frontline workplace safety legislation guide.
Start with the risk and the purpose, not the camera. A body-worn camera may help where there is a defined risk of violence, aggression, disputed accounts or lost evidence. Write down the problem, the evidence for it, and why a less intrusive control is not enough. A sales demonstration is not a necessity assessment. A camera does not replace staffing, safe working methods, communication, withdrawal, supervision or emergency response.
Use incident data, staff views, complaints and risk assessments. Do not rely on a vague aim such as “for safety”.
Test staffing, barriers, room design, communications, fixed closed-circuit television, alarms, supervision and withdrawal arrangements before adding wearable recording.
Compare likely benefit with intrusion, unequal impact, location, audio capture and effects on children, patients, tenants and other vulnerable people.
Do not issue cameras until policy, a data protection impact assessment, privacy information, training, access, storage, redaction, deletion and incident processes all work.
If you still have a case, run a short pilot with one team or site. Use it to test your impact assessment, recording rules and announcement scripts in real work. Hear staff views on fair use before you commit budget and policy to a full rollout. A pilot is not a shop window for camera models.
This is a cross-sector guide, not legal advice. The correct legal basis and sector rules depend on the organisation, the purpose, the country, who is recorded, and how the footage will be used later. Get specialist advice if the plan involves covert monitoring, children, care, healthcare, law enforcement, biometrics, disciplinary action or likely legal claims.
Video, audio, names, locations and identifiers are personal data. Record a lawful basis under the UK General Data Protection Regulation before you buy cameras. Consent is rarely a sound basis for routine recording of staff or the public. People cannot freely refuse a camera on a visit they did not choose. A public authority may rely on public task where its functions have a clear basis in law. A private organisation may consider legitimate interests, with a recorded balancing test. Do not later use footage for a different purpose without checking that this is allowed.
Footage may show health, disability, race, religion, sexuality, trade-union activity, biometrics or alleged offending. Identify any extra condition for special category data. For criminal offence data, identify official authority or a Data Protection Act 2018 Schedule 1 condition. An appropriate policy document may also be required. The right to respect for private and family life in the Human Rights Act 1998 still matters in homes, care and welfare settings.
Information Commissioner's Office body-worn video guidance, checked 30 August 2026, is marked under review because of the Data (Use and Access) Act. It may change. The same page still expects a data protection impact assessment that covers body-worn video and the people whose data is captured. It also expects clear privacy information, such as signs, a spoken announcement or a recording light, plus a privacy notice people can find. Staff should be trained to tell people recording may take place if it is not obvious. Keep footage only for the shortest time needed. You must be able to find footage for subject access or disclosure, and to blur or mask other people. Finish the impact assessment before you start processing, and before you choose a camera that cannot separate audio, stop the wearer deleting files, export an original or redact. If a high risk remains and you cannot reduce it, consult the Information Commissioner's Office before you start. Check the live Office position during the impact assessment and at each policy review.
Use a visible camera, a recording light, signs, a privacy notice people can find, and a spoken announcement where it is safe. Recording without an announcement because the announcement would increase immediate risk is a documented exception inside an overt system. It is not covert monitoring. It is not a licence to hide the camera.
Use this only in exceptional cases. Typical Information Commissioner's Office limits are suspected criminal activity or gross misconduct, where telling workers would get in the way of prevention or detection. There must be senior authorisation, a data protection impact assessment, a tightly targeted and time-limited plan, and no use in toilets, changing rooms or other places where privacy is reasonably expected. Hidden body-worn cameras are not a housing or care safety camera.
The Regulation of Investigatory Powers Act and the Investigatory Powers Act covert surveillance powers are a separate public-body regime. Switching a safety camera to silent does not give a housing association those powers. The Police and Criminal Evidence Act is not a general housing power.
Surveillance Camera Code (England and Wales)Duties under the Code attach to relevant authorities under the Protection of Freedoms Act 2012. Do not treat the Code as a legal duty on every charity, contractor or housing association. Other organisations may still find the principles useful; that is not the same as a statutory duty.
Scotland, Northern Ireland and IrelandName the nation in the data protection impact assessment. Scotland and Northern Ireland follow the UK General Data Protection Regulation and the Data Protection Act 2018, with their own policing and some sector rules. Ireland follows the European Union General Data Protection Regulation, the Irish Data Protection Act 2018 and the Data Protection Commission. Do not copy Information Commissioner's Office wording onto an Irish privacy notice.
A camera may support violence-risk controls. The Worker Protection (Amendment of Equality Act 2010) Act 2023 is current law on reasonable steps to prevent sexual harassment. Body-worn footage is not, by itself, compliance with that duty. Keep the Employment Rights Act 2025 separate. Do not write October 2026 “all reasonable steps” or third-party harassment liability as current law. Do not sell a camera programme as early compliance with duties that are not yet in force. Martyn's Law duties are not in force. Do not list them as a reason to buy cameras.
Use the legislation guide for statutes in more depth. This section is not a full list of the law.
Speak to staff and recognised representatives before the policy is final, not afterwards. Explain whether footage may be used for supervision or discipline. Monitoring must be necessary and proportionate. Choose the least intrusive approach that still works. The data protection impact assessment should consider seeking the views of staff or their representatives. Workers need clear information about how monitoring works. They may request personal data about themselves.
A body-worn camera only works as a safety tool if staff trust what it is for. Footage should be reviewed for a defined reason: an incident, a complaint, a legal request or a police request. It should not be used to check on staff generally. Do not watch back routine, uneventful footage as a performance or conduct check. Staff should know how to raise a concern if footage is reviewed outside its stated purpose.
An original recording, kept in a controlled way, can support a staff member if their conduct is disputed, misrepresented or made the subject of a complaint. The original file, controlled access and handling records matter to the wearer as well as the organisation. That is why wearing the camera can protect staff. Watching staff in secret, without telling them, destroys that safety case.
Equality and private settings need extra care. That includes homes, care settings, schools, healthcare and welfare conversations. Assess whether recording would affect protected groups more than others. Use stronger rules in those places. Do not hide behind a slogan that recording is banned everywhere. Covert use of a body-worn camera against staff will rarely be justifiable.
Write the operational rules before devices go out. Before a shift, confirm that the camera is charged and assigned, that the previous shift's footage has uploaded, and that the wearer knows the device ID they are carrying. Report a fault, low battery or missed upload before the shift starts, not after an incident the camera should have captured. The same daily check is set out in the Staff Device Readiness Guidance.
Set event-based triggers linked to an identified risk. Do not record all the time unless you have exceptional justification. Information Commissioner's Office guidance says continuous recording needs strong justification. It is likely to be excessive and to capture people going about their daily business. Define when recording must start, may start, must stop, and must never be used. Some devices keep a few seconds from before the wearer presses record. Treat that buffer as recording you must justify. Write down its length and whether it includes audio. Allow a wearer to explain why they did not record, or stopped early, without permitting silent selective recording.
Stop recording when the reason for recording has ended. Never use a camera for personal disagreements, catching a colleague out, recording a colleague's routine conduct, or filling an idle shift. Facial recognition or biometric identification is not a default body-worn feature. If a supplier offers it, that is a separate high-risk processing decision. It needs its own data protection impact assessment. It is not a line to approve on the camera order.
Treat audio and video as separate data streams. Justify each one. Prefer equipment that allows separate control where this is workable. Make it obvious when audio is being captured. Set stronger restrictions for private, medical, welfare, legal, trade-union and safeguarding conversations.
Map use in public space, workplaces, vehicles and private homes separately. Define rules for toilets, changing areas, bedrooms, treatment rooms and other private areas. Plan for children, bystanders, interpreters, confidential documents and computer screens. Provide a way to escalate when a person objects, or when recording would create a safety risk. Homes, care settings, children, welfare and safeguarding conversations need stronger restriction. Do not use a ban slogan that staff cannot apply.
Name the controller, system owner, information asset owner and authorised decision-makers. A typical split is: board or senior owner for purpose and resources; data protection lead for the impact assessment, rights and sharing; operational lead for recording rules and training; evidence custodian for preservation and disclosure; information technology for device security; human resources for consultation, fair monitoring and welfare. Keep a processing record, impact assessment, policy, privacy notice, retention schedule and access matrix. Train people for their own roles. Audit recordings, missed recordings, access, exports, deletions, complaints and any pattern that looks discriminatory.
A camera does not give permission to record a colleague's routine work, a confidential welfare conversation, or catching someone out. Wearers must not post clips, send unofficial WhatsApp copies, or befriend clients on Facebook after a recorded eviction. Personal posts must not show family life next to uniformed footage. Sharing footage unofficially is a UK General Data Protection Regulation and Data Protection Act 2018 issue. It is not a joke after the shift.
The same professional-boundary discipline is set out in Recognising boundary drift. Unofficial sharing also belongs with the legislation guide.
Use a short, truthful announcement that matches the approved purpose and the actual device state. It is transparency information. It is not a request for consent and not a threat. Staff should not say the footage “cannot be deleted”, “will definitely be used in court”, “proves everything”, or that a person has no data protection rights. If an announcement would increase immediate risk, policy should allow recording without it and require the reason to be written down afterwards. That remains an overt-system exception. It is not covert monitoring.
“I am switching on my body-worn camera. It records video and audio. I am using it because of [brief approved reason].”
“The camera is used under our organisation's policy. I can tell you where to find the privacy information and how to raise a concern or request your information.”
“I am ending the recording now because the reason for recording has ended.”
Practise switch on, announce and stop as one sequence before a camera is needed. Include mild simulated pressure so the sequence is familiar. Repeat the practice after a period of non-use, a policy change or a new device. Reading a script for the first time during a genuine incident is the same failure as unused safety equipment.
A camera should capture footage. It should not be the organisation's evidence archive. Move footage off the camera into controlled storage. Encrypt the device and local storage. Prevent the wearer from playing, editing, copying or deleting files unless a tightly defined need is approved. Upload promptly through an authenticated dock or managed connection. Define what happens after loss, theft, damage, a failed upload or a flat battery.
In storage, use role-based access, multi-factor authentication, encryption and audit logs that cannot be altered. Record where data is hosted, which subprocessors are used, backups, how deletion works, and any international transfers. Require a processor contract that matches the UK General Data Protection Regulation for UK organisations, or the European Union General Data Protection Regulation for Irish organisations. Test breach reporting, export and exit. Keep originals, working copies and redacted disclosure copies separate. The organisation must be able to retrieve footage without being locked to one vendor.
There is no single legal retention period for every organisation. Set the shortest justified routine period for each purpose and delete automatically when it expires. Do not copy the Department for Work and Pensions 30-day example, or any other sector policy, as a universal rule. Apply a documented hold when footage relates to an incident, complaint, safeguarding matter, claim, disciplinary process, subject access request, police request or likely legal claim. Record who imposed the hold, why, its scope and when it will be reviewed.
Build a process for subject access, objection, restriction and erasure, and for hiding other people in a clip. Rights and exemptions depend on the case. They are not automatic. Do not answer a subject access request by handing over an unredacted clip of other people.
Planned downloads (placeholders only, not finished legal instruments):
Preserve first, then investigate. Make people safe. Deal with injury, immediate danger, safeguarding and emergency escalation through the organisation's emergency and first-aid arrangements. Do not delay urgent care to manage footage. This page does not give personal physical care advice.
In most cases, staff should give their own factual account before viewing the footage. This keeps personal memory separate from what they later see on the recording. A statement should describe what the person remembers. It should not simply narrate the video. If viewing is later authorised, limit it, log who authorised it, and say in any later account that footage was viewed.
Specialist police guidance may require a victim or witness to review a body-worn recording of their own first account before a further interview. That is not permission for an employer to let all staff freely review an incident. For a possible crime or regulatory case, contact the investigating authority early and follow its directions.
The Crown Prosecution Service states that video evidence must be shown to be the original or an authentic copy, and not tampered with. Identify the file with a unique evidence or asset reference. Keep the native original. Never overwrite the source. Write down any clipping, conversion, enhancement, muting or redaction. Hash values can support integrity. They do not replace witness and continuity evidence. Use a secure transfer and follow police, prosecutor, court, regulator or legal instructions.
Once people are safe, offer a short debrief. Where appropriate, point staff to employee assistance or other organisational support. See post-incident support for staff.
These are assurance questions, not a product comparison. Do not treat them as a reason to buy a particular camera.
Ask what a limited pilot costs, and what happens to cost as footage volume, retention or headcount increase. Run the pilot before organisation-wide issue. If facial recognition is offered, stop. Treat it as a separate data protection impact assessment. Safety Solutions Training does not sell cameras.
Safety Solutions Training does not run a standalone camera course, and does not sell or specify cameras.
Body-worn cameras come up in Conflict Management and Lone Worker Safety when the client needs that covered. Training does not replace a data protection impact assessment, a lawful basis, a policy or an evidence process.
Official sources used for this page
Published 28 July 2026. Source check 30 August 2026. Next review 28 October 2026, or sooner if Information Commissioner's Office, data-protection, evidence or sector rules change. Not legal advice.
Practical insight and resources built from thirty years at the frontline.
Guidance for organisations whose staff work alone, visit, travel or need check-in and escalation.
Practical controls for violence, aggression, conflict, reporting and review.
Abusive calls, repeated contact, boundary setting, records and escalation.
Tell us about your staff roles, working environment and the situations your staff face. We will recommend the right training approach for your organisation.
Trusted by organisations across the UK for practical, scenario-led staff safety training.
