Sharing CCTV footage can help explain an incident, support an investigation or provide evidence to an authorised recipient. But a clip recorded in a shared building may show far more than the person or event at its centre: residents, visitors, staff, vehicle details, access codes, screens and private conversations can all appear in the background.
Before sharing a clip, ask: What security question does this camera answer? Then share only the footage, detail and time period needed to answer it. Blurring is an important safeguard, but it is not a substitute for deciding whether disclosure is appropriate in the first place.
This guide is for property owners, managing agents, facilities teams and building managers in the UK. CCTV decisions should be made under the building’s governance arrangements and applicable data protection requirements. Where there is uncertainty, seek advice from your data protection lead or legal adviser.
Start with purpose and data minimisation
Data minimisation means keeping and sharing only what is necessary for a defined purpose. In practical terms, do not export an entire day’s recording when a short sequence will do. Do not include a wide lobby view if a tighter crop shows the relevant interaction. And do not leave unrelated people identifiable simply because they happened to walk through the frame.
Before making a copy, write down the reason for it and who needs to receive it. For example, the purpose might be to investigate damage to a door, respond to a specific incident report or provide material to an authorised investigator. “It might be useful later” is not a good reason to circulate identifiable footage.
Be especially cautious about posting footage publicly or sharing it in a residents’ group. Public attention, online comments and re-sharing can cause harm that is difficult to undo. A legitimate incident review does not automatically justify making a clip available to everyone in the building.
What should be blurred?
Review the complete clip, including its beginning, end and background. The subjects listed below may need to be blurred, cropped, muted or otherwise removed, depending on the purpose and recipient.
What appears in the clip What to consider Faces and other identifying features Blur faces of bystanders who do not need to be identified. Consider distinctive clothing, tattoos, name badges or other details that could identify someone when combined with context. Vehicle details Blur license plates (number plates in UK usage) when a vehicle is not relevant to the disclosure, or when the recipient does not need that detail. Private or sensitive activity Consider whether to obscure information that reveals a person’s home, visitors, movements, health-related activity or other private circumstances. Access and security information Hide keypads, access codes, fob details, security screens, control panels or other information that could help someone bypass building security. Audio and background material Mute unnecessary conversations or remove audio altogether if it is not needed. Check for screens, paperwork, delivery labels or notices visible behind the main event.Blur faces and redact bystanders
If a person is not relevant to the purpose of sharing, ask whether they can be removed from the shared copy. Depending on the footage, that may mean blurring their face, masking their whole body, cropping them out or choosing a different camera angle. A face blur alone may not be enough if the person can still be recognised by a uniform, name badge, mobility aid or distinctive appearance.
To redact bystanders effectively, apply the mask across every frame in which they appear. Check that it follows their movement and does not briefly disappear during a turn, reflection or camera transition. Also inspect mirrors, glass doors and shiny surfaces: a person may be identifiable in a reflection even when their direct image is obscured.
Blur license plates and other identifiers
Blur license plates when they are not necessary for the recipient’s task. A plate can link a vehicle to a person or reveal their visits and movements. If vehicle identification is central to an authorised investigation, the appropriate recipient may need an unredacted copy, while a separate redacted version may be suitable for a wider audience.
Think beyond obvious identifiers. A delivery label, building access screen, visitor log, computer display or document left on a desk may reveal personal or security-sensitive information. Our redaction checklist includes more than faces and plates for a reason.
Choose the right clip before you edit
Blurring is easier when the original recording already has a controlled field of view. At the design stage, consider whether a camera can be angled towards an entrance, gate or other relevant area without filming neighbouring homes, private spaces or more of a shared area than necessary. Use privacy masking or other camera settings where available, and review the view after installation and when the surroundings change.
Camera placement should follow an identified security need, not a “just in case” approach. Ask what risk the camera is intended to address, whether a less intrusive measure could work and which areas must be visible to meet that purpose. A camera pointed at a doorway may capture more than expected when people queue, doors open or mirrors reflect the scene.
Good placement reduces the amount of irrelevant footage collected in the first place. It does not remove the need to review an export carefully. If a camera regularly captures neighbouring property or unnecessary private activity, deal with the field of view at source rather than relying on repeated post-production blurring.
Who owns the decision to share?
In a managed building, responsibility can be spread across an owners’ association or residents’ management company, its board, the managing agent, onsite staff and a CCTV or data protection lead. The exact responsibilities depend on the arrangements in place. Make them clear in writing, so that staff know who can approve an export, who can authorise disclosure and who is responsible for keeping a record.
Board members and residents should not casually view footage out of curiosity. Access should be limited to people who need it for an assigned role. An incident review is not permission to browse unrelated recordings, and a request from a resident should be handled through the agreed process rather than by handing over a recorder login.
Set out a simple approval route. It should cover the reason for access, the time period and cameras requested, the person approving the request, any redactions required and the permitted recipient. Escalate unusual requests—especially requests for public posting, broad access or footage involving vulnerable people—to the appropriate lead before exporting.
How to prepare a shareable copy
Record the purpose. Note what question the footage is meant to answer and why sharing it is needed. Limit the material. Select the shortest useful time window and relevant camera views. Avoid exporting adjacent footage by default. Choose the recipient. Confirm who will receive the clip and what they are authorised to do with it. Redact carefully. Blur faces, blur license plates and redact bystanders where they are not needed. Check the full frame, reflections and audio. Review the finished file. Watch the exported copy from start to finish. Confirm that redactions remain in place throughout and that the clip does not contain extra footage or metadata you did not intend to share. Keep a record. Log the purpose, date, approving person, recipient, footage supplied, redactions and any restrictions or deletion date communicated to the recipient.Keep the original recording separate from the redacted shareable copy. Editing the only original can compromise its usefulness as evidence. If authenticity or evidential integrity matters, preserve the source in a controlled system and document how the working copy was created.
Where does the exported clip go?
Before you press “export”, ask the question I always ask onsite: Where will the exported clip end up, and who can open it? A controlled system or approved secure transfer is generally safer than an attachment sent around by email or a link dropped into a shared folder.
Use a restricted destination with access limited to named, authorised people. Avoid raw clips in group chats, personal devices and broad shared drives. If a secure link is used, check its permissions and expiry settings. If a password is needed, send it through a separate approved channel. Tell the recipient not to forward or republish the clip and to delete their copy when the stated purpose is complete, subject to any applicable requirements to preserve it.
Keep a disclosure log that records where the copy was stored, who could access it, who received it and when access should end. Review access permissions and remove the export when it is no longer needed, while preserving any required record of the disclosure itself. A shared-folder dump with no owner and no deletion date is not a controlled process.
Retention and routine deletion
Set a retention period that reflects the purpose of the CCTV system and the building’s needs. There is no single number of days that suits every property. The period should be considered and documented rather than chosen simply because storage is available.
Routine deletion is part of responsible surveillance. Configure systems to overwrite recordings after the approved period, and make sure that incident clips do not quietly remain in export folders after the main system has overwritten them. Where footage must be preserved for a specific matter, record why, who authorised the exception, where it is held and when its continued retention will be reviewed.
Retention applies to copies as well as the recorder. Check downloads, local workstations, transfer links, mobile devices and backups. A copy that has been forgotten in a convenient folder is still a copy that may be accessed or disclosed.
Quick redaction checklist
- Have you limited the clip to the shortest relevant time and the necessary camera views? Have you blurred faces and other identifying features of people who are not relevant? Have you blurred license plates when the recipient does not need them? Have you checked reflections, windows, background screens, paperwork and delivery labels? Have you considered audio, conversations and access-control details? Does each blur or mask stay in place for the entire clip? Is the original preserved separately from the edited copy? Do you know where the export is stored, who can open it and when it will be deleted? Have you recorded the purpose, approval, recipient and scope of the disclosure?
Don’t guess at software costs
No prices listed in the scraped article is a useful reminder not to invent a price or treat a software cost as a compliance answer. CCTV editing tools vary in features, support, storage and licensing, and a parking garage camera placement quoted price may quickly become out of date. If comparing products, check current supplier information directly and assess whether the tool can reliably track moving subjects, protect the original file and support secure access. A low-cost blur tool is no substitute for a sound disclosure process.
Sharing links and final checks
If you are sharing this guidance, use the organisation’s approved social accounts and check that the link points to the intended page. A share control should not include footage, resident details or incident information in its post text.
- Facebook share X (Twitter) share
The safest CCTV share is usually the smallest one that does the job: a relevant clip, a defined recipient, appropriate redactions and a clear end point for access and retention. If you cannot explain why each visible detail is needed, pause and review it before sharing.