Most homeowners installing a video doorbell or CCTV camera assume it is purely a personal decision, no different from choosing a burglar alarm. Often that is true. But the Information Commissioner’s Office (ICO), the UK’s data protection regulator, has published specific guidance making clear that once a camera captures anything beyond your own property boundary, you are no longer simply a private homeowner in the eyes of data protection law — you become a data controller with real obligations.
Where the “domestic purposes” exemption stops applying
According to the ICO’s guidance for people using home CCTV systems, if a camera is set up so that it captures images only within the boundary of your own private property, including your garden, then UK data protection law does not apply to that footage at all; it falls within the domestic purposes exemption. That changes the moment the camera’s field of view extends beyond your boundary: capturing a neighbour’s garden, a shared driveway, a communal hallway or a public footpath or street takes the system outside the exemption, and the ICO’s guidance is explicit that data protection law then applies in full.
This is a wider trigger than many owners expect. A doorbell camera angled to also catch the pavement, or a garden camera that incidentally sweeps across next door’s fence line, is enough to bring the whole system into scope, even if capturing the neighbour’s property was never the intention behind installing it.
What actually changes once the exemption stops applying
Once your CCTV captures beyond your boundary, the ICO’s guidance sets out several concrete obligations. You should limit what the camera records to what is genuinely necessary rather than the widest angle available, and point cameras away from neighbouring property, public areas or communal spaces where that is practically possible. You need clear signage indicating that CCTV is in operation, footage must be stored securely and access restricted to people who genuinely need it, and it should be deleted on a regular or automatic schedule rather than kept indefinitely. Critically, if someone who appears in your footage asks to see it, you are expected to be able to respond to that request appropriately, in the way any other data controller would handle a subject access request.
The guidance treats audio capture the same way as video: if a camera or doorbell records sound that identifies or affects someone outside your property, that recording is personal data too, and the same obligations apply. Continuous audio recording of a shared path or a neighbour’s garden is generally more intrusive than video alone, and the ICO’s guidance specifically flags this as something to think carefully about rather than leave switched on by default.
Practical steps for anyone installing or reviewing a system
Before fitting a camera, walk through what it will actually capture at different times of day, not just its default factory framing, since many smart cameras ship with a wide field of view intended to cover the largest possible area. Angling a camera to focus on your own doorway or driveway rather than a wide sweep of the street is often enough to keep a system within the domestic exemption while still deterring the opportunistic doorstep theft or package theft it was bought for.
Where some capture beyond the boundary is unavoidable, for example a terraced house where the pavement is directly in front of the door, the ICO’s own recommended good practice is to apply privacy filters or masking to blank out the parts of the image that are not genuinely needed, use clear signage, and be prepared to explain your reasoning and respond to a request if a neighbour or passer-by raises a concern. The ICO’s guidance also suggests that a conversation with neighbours before installation, where practical, tends to prevent the kind of dispute that otherwise ends up as a formal complaint to the regulator.
None of this stops you fitting a doorbell camera or CCTV system; the ICO is explicit that domestic security is a legitimate reason to have one. What it changes is the assumption that, because it is your camera on your house, no one else’s rights are in play once the lens points past your own front gate.
What happens if a neighbour complains
If a neighbour raises a concern about your camera, the ICO’s own process is generally the second step, not the first. Its guidance encourages people to try to resolve the issue directly with the camera owner before making a formal complaint, and in practice most disputes are resolved by adjusting the camera’s angle, adding a privacy mask over a specific area, or agreeing signage, without ever reaching the regulator. If a complaint is made to the ICO and data protection law is found to apply, the regulator’s usual first response is to work with the camera owner to bring the system into compliance rather than to impose a penalty immediately, though repeated or wilful non-compliance can escalate further.
Doorbell cameras deserve a specific mention because their default field of view is often wider than owners realise, commonly capturing a strip of pavement or a section of a neighbour’s boundary as a side effect of covering the full width of a front door. Checking the actual recorded footage, not just the live preview shown in the app, is the most reliable way to find out what a system is really capturing before assuming it stays safely within your own boundary.