CCTV signage requirements in the UK: what the sign must say

In the UK, if you run CCTV that captures people, you have to tell them. The duty comes from Article 13 of the UK GDPR, and the Information Commissioner’s Office (ICO) is clear that you must let people know when they are in an area where a surveillance system is in operation. In practice that usually means a sign. The ICO asks for three things on it: who operates the system, what it is for, and how to get in touch.

We found no official UK template. If you want one ready to print, our CCTV sign generator lays out those fields and saves the sign as a PDF.

What the UK rules say

GOV.UK’s guidance for businesses puts it in one line: if you use CCTV you must tell people they may be recorded, usually by putting up signs, and those signs have to be clearly visible and readable.

The ICO’s guidance on video surveillance turns that into a checklist. Signs should be clearly visible and readable. They should name the organisation operating the system, give the purpose and say who to contact about it. As a minimum they should carry a website, phone number or email address. Size should suit the context, and the ICO’s example is whether the sign is read by pedestrians or by drivers.

Article 13 of the UK GDPR is the full list behind the sign. It covers the controller’s identity and contact details, the data protection officer’s details where there is one, the purposes and legal basis, recipients, the storage period or the criteria for setting it, and the person’s rights. The UK text also lists the right to complain to the controller. Not all of that fits on a sign, and the ICO accepts a layered approach: a physical sign that points to fuller information. A notice on your website on its own is not enough.

The ICO gives sample wording for cases where it is not obvious who runs the cameras:

Images are being monitored and recorded for the purposes of crime prevention and public safety. This system is controlled by XXXXX. For more information, visit our website at (web address) or call 01234 567890.

Inside a shop the operator may be obvious, and the ICO says the sign then need not name it. We would still name it. It costs one line and settles the question.

The ICO notes that, because of changes made by the Data (Use and Access) Act, this guidance is under review and may change. Check the live version before you sign off a large job.

Where the signs go and how many

The ICO’s advice is to place signs prominently before people enter the cameras’ field of vision, then reinforce them with further signs inside the area. Someone should be able to understand they are being filmed before they are in shot. The ICO’s own example: warning people about particularly intrusive technology is not fair if they can only read the sign once the system has already captured them.

Where people are less likely to expect cameras, signs should be more prominent and more frequent. The ICO singles out systems that cover a large public area.

The Surveillance Camera Code of Practice adds a published contact point for access requests and complaints, and says people in public places should normally know who is filming them and why. Relevant authorities in England and Wales must have regard to the code. Other operators are encouraged to adopt it voluntarily. The code also accepts that the exact location of cameras need not always be disclosed if doing so would defeat the justified purpose.

Do I need a CCTV sign on my house?

It depends on where the cameras point. The ICO’s guidance for organisations does not cover domestic systems used in a purely personal or household context.

Once a home camera records beyond your property boundary, the position changes. That includes the street, a shared drive or a neighbour’s garden. GOV.UK’s domestic CCTV guidance, updated in May 2026, says the UK GDPR and the Data Protection Act then apply to you. The ICO’s page on home CCTV lists the rules that follow, and one of them is letting people know you use CCTV, for example with a sign.

GOV.UK also suggests telling your neighbours about the system and putting up a notice that recording is taking place, as a matter of transparency. For an installer this is the simple answer to give a homeowner: if any camera sees past the boundary, fit a sign at the front. We cover the neighbour side in home CCTV that films the street or next door.

Signs when CCTV records audio

The ICO says that in most situations audio recording is more intrusive than pictures alone. Its guidance says CCTV should not normally be used to record conversations between members of the public, and that any audio capability should be switched off by default. Use it only where you can show a specific need that less intrusive methods will not meet.

If audio is on, the ICO asks you to take additional steps to make that clear, over and above what you already do for video. The ICO does not prescribe the wording. A standard “CCTV in operation” sign does not tell anyone that their words are being recorded, so our advice is to put “audio and video recording” on the sign and check the setting on the recorder matches what the sign says. GOV.UK’s domestic guidance asks homeowners the same question: does it need to record audio?

Check the audio setting at commissioning. Off is the ICO’s default.

What a poor sign can cost

The statutory ceiling for infringing data subjects’ rights, which include the Article 13 information duty, is £17.5 million or, for an undertaking, 4% of total worldwide annual turnover, whichever is higher. We did not look for UK enforcement cases on signage alone, so we cannot say what a typical penalty is.

Italy and Spain show what everyday enforcement looks like, and the sums are small. In February 2026 Italy’s regulator fined a restaurant €2,000 in a case where its two outside signs showed only a camera icon, with no controller and no purpose; the figure also covers other breaches. In a 2023 Spanish case a company had a sign that did not mention people’s rights, and the regulator fined it €500 for that breach. In both cases a sign was up. The content was the problem.

Italy and Spain in brief

	UK	Italy	Spain
Minimum content	ICO: operator, purpose, contact	Controller and purpose, among other items, plus a pointer to the full notice	That processing takes place, who the controller is, that rights can be exercised
Where	Before the field of view, with more signs inside	Before the person enters the monitored area	A sufficiently visible place, at least at every access point
Official template	None. ICO sample wording only	Yes, the Garante’s simplified template	Yes, the AEPD sign
Statutory maximum fine	£17.5 million or 4% of turnover	€20 million or 4% of turnover	€20 million or 4% of turnover

Italy’s regulator, the Garante, publishes a sign template as a Word file with six fields: who is recording, the data protection officer’s contact if there is one, how long images are kept, the purpose, whom to contact about rights, and where the full notice is. The European guidelines it follows explain why retention belongs on the sign: if the sign says nothing, people may assume the cameras are only watched live. See our guide to CCTV footage retention.

Spain writes three minimum items into Article 22.4 of its data protection act. The AEPD’s sign has three blank fields and no space for purpose or retention. Its legal service has said there is no minimum size, the sign need not sit under the camera, and it needs no approval from the private security authorities.

Our sign generator produces the Italian or Spanish text too, in the language of the country where the sign goes up.

What to do on site

• Get the sign details from the client before handover: operator name, purpose, retention period, and a website, phone number or email.
• Put a sign before each way into the camera’s field of view, and more inside larger areas.
• Size it for the people reading it, on foot or behind the wheel.
• Do not leave icon-only signs. Name who is operating the system and why.
• Make sure the full privacy information exists where the sign says it is.
• Leave audio off unless the client has an evidenced need. If any camera does record sound, say so on the sign.
• On a house, check whether any camera sees past the boundary. If one does, fit a sign.
• For a relevant authority in England or Wales, add the published contact point the code asks for.
• Photograph the installed signs and keep the photos with the handover documents.