Covert recording laws in the UK and how they apply to body-worn cameras
Covert recording can protect people, expose wrongdoing, and provide clarity after a high-risk incident. It can also erode trust fast and it’s a common trigger for complaints, HR issues, and data protection risk if the rules are not tight.
For most body-worn camera (BWC) programmes the aim is overt use: visible devices, clear policies, and notice where practical. The real question is usually when would we ever need to record without clear notice and how do we stay lawful if we do?
This guide covers the covert recording meaning, how the covert recording law in the UK is typically applied in practice, and the controls that keep a BWC deployment defensible.
What is covert recording?
A practical definition of covert recording is capturing audio, video, or both without the knowledge of the person being recorded, or in a way a reasonable person would not expect.
That can include recording a conversation without telling other participants, recording in spaces where people expect privacy (welfare areas, staff rooms, changing rooms), capturing audio “by default” when people assume video only, or using a device that is not obviously active.
It also helps to separate covertly recording conversations from planned covert surveillance. A one-off recording of a meeting is not the same governance exercise as repeated, planned covert activity.
Is covert recording legal in the UK?
There is no single “covert recording act” that automatically bans all secret recordings. Whether covert recording is lawful depends on how it is done, who is doing it, where, and what happens to the recording afterwards.
Is it illegal to covertly record a conversation you’re part of?
A frequent question is whether it is illegal to covertly record a conversation when you are a participant.
In many everyday scenarios, privately recording a conversation you are part of is not automatically a criminal offence. Risk often comes from what follows: sharing the file, using it outside the original context, capturing confidential information, or recording in a way that violates workplace rules.
Interception is different from recording
The line is sharper when you are intercepting communications you are not a party to (for example, capturing calls or messages “in transit”). That can engage stricter rules and regulated authorisation frameworks, particularly for public authorities.
Privacy, confidentiality, and workplace expectations still matter
Even where recording is not criminal, covert recording can still create exposure through breach of confidence, misuse of private information, and employment consequences. “Not automatically illegal” is not the same as “safe, fair, or defensible”.
GDPR covert recording and why BWCs raise the stakes
For most organisations, the biggest practical risk is covert recording under GDPR.
If body-worn camera footage can identify someone (face, voice, name badge), it is personal data. That means you need a defined purpose, a lawful basis, proportionate collection, a retention plan, and workable processes for disclosure and rights requests (including redaction for third parties).
Covert use makes transparency hard. If people could not reasonably expect to be recorded, your justification and safeguards need to be stronger, and you should be confident that the same objective could not be achieved in a less intrusive way.
Covert recording with body-worn cameras
Most covert questions come up as exceptions to normal overt use. Typical scenarios include:
- A serious threat where announcing a recording could escalate violence.
- A volatile incident where staff need to prioritise immediate safety.
- A suspected fraud/theft investigation where overt recording would defeat the purpose.
The governance test is whether you can show the decision was necessary, proportionate, time-limited, and properly documented.
Public authority considerations
If a public authority is planning covert activity, it may move into formal authorisation territory. At that point, it is not a “feature decision”. It is a legal and governance decision about whether the activity is permitted, how it is authorised, and how it is overseen.
Keeping deployments grounded in reality
If you are assessing devices and workflows, Radiocoms’ overview of body-worn cameras and badges is a useful starting point for thinking through operational contexts and the controls that matter in the field.
Can covert recordings be used as evidence?
Teams also ask, “can covert recordings be used as evidence?”
In the UK, courts and tribunals often have discretion to admit relevant evidence, even if it was obtained in an underhanded way. In practical terms, that means covert recordings may be admitted if they are relevant and reliable but admissibility does not protect the person or organisation from consequences. The way evidence was obtained can affect credibility, weight, costs, and how decision-makers view conduct.
Operationally, assume covert recordings may surface later in grievances, disciplinary processes, tribunals, or civil claims. If your organisation is carrying out the recording, you should be able to show:
- Why covert recording was necessary at that time.
- Why less intrusive options would not work.
- How you reduced third-party capture.
- How you preserved integrity (secure upload, audit logs, controlled access).
If you cannot evidence those points, a recording that helps in the moment can become a governance problem later.
Best practices and covert recordings guidance for BWC programmes
These controls help ensure rare covert edge cases do not undermine an otherwise comprehensive programme.
1) Make the policy specific
Your covert recordings guidance should be explicit about when covert recording is prohibited, the limited circumstances where it may be justified, who can authorise it, how authorisation is recorded, and what time limits and review triggers apply.
2) Put privacy controls into the workflow
Rely on practical controls, not just paperwork:
- Defined “no-record” areas (welfare spaces, medical areas, safeguarding environments) unless there is a pressing, documented reason.
- Simple prompts to capture the reason for activation and incident context.
3) Use a DPIA that reflects real operations
A Data Protection Impact Assessment (DPIA) is where you stress-test necessity and proportionality, document safeguards, and address the risks that show up in real life: misunderstanding, misuse, mission creep, and inconsistent activation decisions.
4) Train for judgment under pressure
Most BWC risk is human. Training should cover how to explain recording where possible, what to do when notice is not possible (and how to document why), how to minimise unnecessary third-party capture, and how to handle objections and complaints.
5) Handle footage like evidence
If you may rely on footage as evidence, build the discipline in: secure upload and encrypted storage, role-based access, audit trails for viewing and export, controlled sharing, redaction for third parties, and retention schedules that are enforced.
6) Prepare for disclosures and rights requests
Have a workable process for police/regulator requests, insurance/legal disclosure, and subject access requests – including identity checks, third-party redaction, and clear response timelines.
7) Control the use of covert recording
If covert recording is allowed at all, keep it tightly controlled: get senior sign-off, write down why covert is needed, set a clear start and stop time, and carry out a review afterwards to confirm it was justified and what should happen to the footage – with audit logs and consequences for misuse.
Covert recording in BWC deployments: why governance comes before technology
Covert recording is rarely a technology problem. It is a governance problem.
If your organisation is considering covert capability within a body-worn camera deployment, treat it as an exception with a higher bar: stronger justification, tighter authorisation, and clearer documentation. If you want to sanity-check use cases, recording rules, and evidence workflows (including avoiding fairness and transparency pitfalls), contact Radiocoms to help map operational reality to a compliant, defensible deployment.
Let’s start a conversation.
Provide the following information and we’ll put you in touch with the right person.