UK

My neighbor's CCTV cameras film my property. What are my privacy rights under UK law?

UK GDPR, Data Protection Act 2018, Human Rights Act 1998 (Art 8)
Relevant Statute
6 years for civil claims (Limitation Act 1980, s.2)
Time Limit
County Court (civil claim), ICO (complaint), First-tier Tribunal (GDPR enforcement appeals)
Court/Jurisdiction
The Short Answer

Your neighbour’s CCTV may breach your privacy rights if it records you in private areas (e.g., your garden or bedroom) without justification. Under the UK GDPR and Data Protection Act 2018, they must comply with data protection principles — including purpose limitation, data minimisation, and transparency — especially where recording captures personal data about you. You can request access to footage and ask for erasure or rectification.

What the Law Says

Under UK data protection law, your neighbour is considered a 'data controller' if their CCTV captures personal data about you — such as your image, movements, or vehicle registration — on your private property or in areas where you have a reasonable expectation of privacy (e.g., your garden, driveway, or windows). The UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 require them to process this data lawfully, fairly, and transparently (Art 5), with a valid lawful basis (typically 'legitimate interests', subject to balancing against your rights). They must also conduct a legitimate interests assessment (LIA), minimise recording (e.g., avoid pointing cameras directly at your property), display clear signage, and retain footage only as long as necessary. Persistent or intrusive recording may also engage Article 8 of the Human Rights Act 1998 (right to respect for private life), particularly where it creates a pattern of surveillance affecting your sense of security or autonomy.

Practical Steps

First, approach your neighbour informally — calmly explain which areas are being recorded and why it concerns you; many disputes resolve at this stage. If unresolved, request in writing that they adjust camera angles, install privacy masks, or provide a copy of their data protection policy and LIA. Under UK GDPR Article 15, you have the right to make a subject access request (SAR) for any footage containing you — they must respond within one month. If they refuse or fail to comply, lodge a complaint with the Information Commissioner’s Office (ICO), which can issue enforcement notices. As a last resort, you may seek an injunction in the County Court under the Protection from Harassment Act 1997 or via a civil claim for misuse of private information — but legal advice is strongly recommended before initiating court action.

Sources

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-10-18.