What legislation covers the use of body-worn cameras in the UK?

Body-worn cameras are now widely used across security, emergency services, retail and other frontline roles. As their use grows, so does the need for clarity around what legislation covers the use of body-worn cameras in the UK and what responsibilities organisations must follow to remain compliant.

This article explores the laws, rights, and regulatory guidance that shape body-worn camera legislation in the UK, including data protection, consent, and rules on covert recording.

What legislation applies to body-worn cameras?

Several pieces of legislation govern how body-worn cameras can be deployed and how the footage must be handled. The main requirements come from data protection law, human rights legislation, and sector-specific regulatory guidance.

Data Protection Act 2018 (DPA 2018)

The Data Protection Act 2018 sits alongside the UK GDPR and is one of the main laws shaping body camera legislation. Whenever a camera captures video or audio that can identify someone, it counts as personal data – so the DPA applies.

This legislation requires organisations to:

• Have a lawful basis for recording.
• Be clear and transparent with individuals about when and why they are being recorded.
• Store footage securely.
• Implement retention and deletion policies.
• Ensure only authorised personnel have access.
  

UK GDPR

Under the UK GDPR, body-worn camera footage is treated as personal data and needs to be handled with care. In practical terms, this means organisations should follow a few familiar principles:

• Purpose limitation: Footage can only be used for the reason it was recorded.
• Data minimisation: Record only what is necessary.
• Security: Protect footage using technical and organisational controls.
• Accountability: Organisations must document decisions and policies that justify how cameras are used.

Any organisation deploying cameras must complete a Data Protection Impact Assessment (DPIA) to assess risks and determine whether camera use is proportionate.

Human Rights Act 1998

The Human Rights Act also plays a role in body-worn cameras legislation in the UK. Article 8 protects a person’s right to a private and family life, so organisations need to make sure recording doesn’t become intrusive without a clear reason.

This means recordings must not be intrusive unless clearly justified, and covert recordings must meet a high threshold of necessity.

Protection of Freedoms Act 2012

Part 2 of the Act introduced guidance for how surveillance camera systems should be used. It doesn’t apply to every organisation, but the principles of proportionality, transparency, and accountability are helpful benchmarks for anyone using body-worn cameras.

Body cam laws and rights in the UK

Clear guidance has been established to help organisations use cameras responsibly. Users must understand the rights of the public and the responsibilities placed on camera operators.

The role of the Information Commissioner’s Office (ICO)

The ICO provides detailed guidance on body-worn cameras legislation and how organisations should manage personal data.

Key ICO expectations include:

• Clear signage or verbal announcements when recording begins.
• Policies that explain when cameras can be used.
• Secure storage and defined retention periods.
• A strict access log for reviewing footage.

Failure to meet these requirements can result in enforcement action or fines.

Surveillance Camera Code of Practice

Oversight of the Surveillance Camera Code of Practice, originally developed under the Protection of Freedoms Act 2012, now sits with the Information Commissioner’s Office (ICO). Public bodies are expected to follow the Code and, while it is not mandatory for private businesses, it is widely regarded as best practice.

The Code emphasises:

• Necessity and proportionality.
• Public awareness of recording.
• Strong governance and accountability.
  

Data Protection, GDPR, and body-worn footage

Because body-worn cameras capture so much personal data, staying on top of the Data Protection Act 2018 and UK GDPR isn’t just a legal requirement – it’s a practical necessity for teams using cameras day to day.

Lawful basis for recording

Organisations typically rely on:

• Legitimate interests
• Public task (for emergency services)
• Vital interests (in cases of safety)

Retention and storage rules

Footage should be:

• Encrypted in transit and at rest.
• Stored in controlled environments.
• Retained only as long as necessary.

In practice, many organisations adopt retention periods in the region of 14 to 31 days, unless footage is needed for evidence. However, there is no specific statutory period set in law – footage should simply not be kept for longer than is necessary for the purpose it was recorded.

Rules about body cam recording and consent

One of the most common questions is whether consent is required before recording.

Is consent needed?

Under UK GDPR, consent is usually not the most appropriate lawful basis for body-worn cameras, especially when used for safety or incident recording.

Instead, organisations rely on legitimate interests or public tasks. However, transparency remains essential.

Public notification requirements

Camera operators should:

• Make a verbal announcement when the recording starts.
• Display visible indicators (such as LED lights) where applicable.
• Record only when necessary to achieve a clear purpose.

UK law on covert body cam use

Covert recording raises serious privacy concerns and is tightly regulated, so it should only ever be considered in limited and well‑justified situations.

When is covert recording allowed?

Covert recording is only lawful when:

• It is strictly necessary.
• It is proportionate to the aim.
• It is used for a limited duration.

Public authorities must comply with the Regulation of Investigatory Powers Act 2000 (RIPA), which regulates covert surveillance.

Private organisations must demonstrate exceptional justification and complete a robust DPIA before considering covert recording.

Covert body-worn cameras legislation UK guidance makes it clear: covert use should be a last resort.

Basics of body-worn camera privacy compliance

For organisations deploying cameras, several practical steps support compliance with body camera legislation in the UK.

1. Establish clear policies

Policies should cover when recording is allowed, how and when cameras should be activated, how to handle requests for footage, and how data will be retained and deleted.

2. Train staff thoroughly

Operators must understand when to record, how to store footage securely, and how to communicate clearly with the public.

3. Protect footage with security controls

This may include encryption, strong access controls, and the use of secure cloud storage.

4. Document everything

Accountability is vital. Organisations must document DPIAs, privacy notices, the justification for camera use, and clear retention policies.

5. Review practices regularly

Annual reviews ensure practices stay compliant with evolving body-worn cameras legislation. 

Alongside clear policies and governance, choosing the right hardware partner can make day-to-day compliance much simpler. Radiocoms works with organisations to provide integrated solutions for body cameras, helping you match device capabilities to your recording, security, and retention needs.

The bottom line

Understanding what legislation covers the use of body-worn cameras helps organisations balance safety, accountability, and privacy. By following the Data Protection Act, UK GDPR, ICO guidance, and sector-approved surveillance standards, organisations can deploy cameras confidently while respecting the rights of the public.

As technology advances and more sectors adopt body-worn cameras, staying compliant with body-worn camera legislation in the UK remains essential for building trust, transparency, and operational integrity.

 

Read more about Body Worn Cameras.