A practical introduction to UK privacy and data-protection considerations for dashcams, in-vehicle cameras, road monitoring and number-plate recognition, especially for business users.
Keep the record useful and proportionatePrioritise road safety, preserve original evidence, verify machine-read information and avoid conclusions that the footage itself cannot support.
Personal and business use are not always the same
Privacy obligations depend on how and why recording takes place. A private individual recording for purely personal purposes can be in a different position from a company, taxi driver, fleet operator or employer using cameras systematically for work. Business use should be assessed against current ICO guidance rather than assuming personal-use rules apply.
Video can contain personal data
Footage can include faces, voices, locations and vehicle registrations. The ICO’s video-surveillance guidance covers technologies including dashcams and ANPR where personal data is processed. Organisations need a clear purpose and must consider lawfulness, fairness and transparency.
Tell people when business recording affects them
For business vehicle cameras, the ICO says organisations should tell people that recording is taking place and handle footage responsibly. Depending on the use, this can involve signage, privacy information, staff communication and a clear explanation of the purpose.
Collect only what you need
Avoid recording more than is necessary for the stated purpose. Interior audio, continuous staff monitoring and broad surveillance can create additional privacy impact. Configure retention and access so recordings are not kept indefinitely simply because storage is available.
Secure footage and control access
Treat recordings as potentially sensitive business records. Limit who can view or export them, use secure devices and storage, document retention periods, and have a process for deletion. Businesses also need to be aware that individuals may have data-protection rights in relation to footage that identifies them.
ANPR adds another layer
ANPR can process large amounts of registration data. The ICO specifically highlights the data-protection implications of ANPR systems. If you are using recognition systematically for an organisation, assess the necessity and proportionality of the processing and whether a Data Protection Impact Assessment is appropriate.
Check obligations before deployment
Business circumstances vary. Taxi licensing, employment monitoring, fleet contracts and sector-specific rules can create additional requirements. Check the ICO’s current guidance and obtain professional advice where your planned use is extensive, sensitive or high risk.
Practical checklist
Practical checklist
- Define why you are recording
- Identify whether the use is personal or organisational
- Provide appropriate transparency for business recording
- Limit collection to what is necessary
- Set retention and deletion rules
- Restrict access and secure exports
- Assess ANPR and higher-risk monitoring carefully
- Check ICO guidance before deployment
Official resources
Rules and reporting routes can change. Check the current official guidance that applies to your situation.