Commercial Building CCTV: Landlord vs Tenant Responsibility

When a camera captures an incident in a commercial building, the practical questions come quickly: who chose the camera, who can view its footage, and who is responsible for keeping or deleting it? The answer is not always “the landlord” or “the tenant”. That said, there are exceptions. Responsibility depends on where the camera is installed, who determines its purpose and operation, and what the lease and related policies say.

A good arrangement starts with a simple reality check: What security question does this camera answer? If nobody can explain why the footage is needed, or who is authorised to use it, the camera may be collecting more information than the building needs. This guide explains how to divide responsibilities, control camera views, set retention periods and discuss costs in a UK commercial property context.

Why landlord and tenant CCTV responsibilities can overlap

Commercial CCTV is often treated as a facilities issue: the landlord supplies cameras in shared areas, while a tenant installs its own system inside its premises. That is a useful starting point, but it is not a complete responsibility map. A landlord may choose the system while a managing agent operates it; a tenant may own a camera but capture a shared corridor; or a security contractor may store footage on a cloud platform.

Under UK data protection law, the organisation deciding why and how personal data is processed will generally have data protection responsibilities as a controller. The precise role depends on what each party actually does, not just on who paid for or owns the equipment. Where responsibilities are shared or delegated, the parties should document the arrangement and take appropriate advice.

Situation Typical lead responsibility What to clarify Landlord common area CCTV Usually the landlord, managing agent or another organisation deciding its purpose and operation Purpose, notices, authorised viewers, retention, disclosure process and supplier access Tenant controlled camera systems inside demised space Usually the tenant, if it decides why and how the cameras operate Lease permissions, field of view, staff and visitor information, access controls and deletion Camera covering both a tenant area and shared space May require coordinated responsibilities between the parties Who determines the purpose, who can access footage, and how requests or incidents are handled

This table is a practical guide, not a substitute for reviewing the lease, system design and actual operating arrangements. A camera’s location alone does not settle who is responsible.

Landlord common area CCTV: define the purpose first

For landlord common area CCTV, write down the specific security or safety purpose before selecting cameras. Examples might include investigating reported thefts in a goods entrance, managing access to a car park, or establishing what happened after a safety incident in a lift lobby. “General security” may be too vague to guide decisions about camera coverage and access.

That purpose should inform which areas need monitoring and which do not. Data minimisation means collecting only what is reasonably needed for the stated purpose. It is not a reason to install a camera everywhere on the chance that footage could be useful one day.

Check the field of view

Draw or review the camera’s field of view before installation. Could it capture office screens, neighbouring premises, a private tenant area, or a space where people reasonably expect privacy? Can the lens be angled, masked or configured to exclude those areas? Review the actual image from the installed camera too: a plan may look acceptable on paper while the live view captures more than intended.

Useful controls include privacy masking, restricted camera angles, disabling audio where it is not necessary, and limiting the use of zoom or pan functions. Set rules for changing a camera’s view so that a temporary adjustment does not quietly become permanent coverage of a new area.

Tenant controlled camera systems: coordinate before installation

Tenants may have good reasons to install cameras inside their premises, such as monitoring a stockroom or a controlled entrance. Tenant controlled camera systems still need careful planning. A camera in a tenant’s unit might capture a shared corridor, neighbouring shopfront, reception desk or building entrance. That can affect other occupants and may conflict with the landlord’s own system or the lease.

Before installation, the tenant should check the lease terms security cameras and any building rules. The landlord should explain any approval process, including technical limits, cabling, mounting, access for maintenance and restrictions on filming shared areas. Both parties should identify who is responsible for signs, footage requests, complaints, system security and routine deletion.

Put the operating rules in writing

Where systems overlap, agree in writing how they will work together. For example, the landlord may manage cameras in shared areas while the tenant manages cameras within its leased premises. If either system captures the other party’s area, agree how to minimise that capture and who will respond to a request concerning the footage. Do not assume that one party can freely browse the other’s system because it is in the same building.

List the purpose and areas covered by each system.
Name the organisation responsible for deciding how each system operates.
Set out who can view live feeds and exported clips.
Agree a route for incident requests, complaints and data subject requests.
Require approval before material changes to camera locations, views or access.

Lease terms security cameras should address

Lease wording may determine whether a tenant can install equipment, alter building fabric, run cabling or monitor areas outside its premises. It can also describe the landlord’s rights to operate cameras in common parts. However, a lease clause should not be treated as a complete CCTV policy. The day-to-day handling of footage needs operational rules as well.

Review the lease and building procedures for provisions covering:

Landlord or tenant rights to install, maintain and remove cameras.
Approval for equipment, cabling, drilling and changes to camera views.
Restrictions on filming neighbouring units or shared areas.
Responsibility for notices, privacy information and handling requests.
Access by managing agents, security staff, contractors and insurers.
Costs for installation, maintenance, storage and replacement.
What happens to equipment and stored footage when a lease ends.

Ask a solicitor to review lease language where responsibilities are unclear or a proposed system could affect other occupiers. The practical facts matter: who sets the purpose, who controls access, and who can change the system?

Access, exports and disclosure: control the footage after capture

Restrict footage access to people who need it for their role. Curiosity is not a valid reason to watch cameras. Use named accounts rather than shared log-ins where possible, and keep an access record showing who viewed, exported or disclosed footage and why.

Always ask: where do exported clips end up, and who can open them? An exported clip should not be emailed around casually or placed in a broadly accessible shared folder. Use an approved, access-controlled method; record the recipient, purpose and date; and set a deletion date for the exported copy. Check whether a contractor or cloud provider can access stored footage, and document the safeguards and instructions that apply.

When someone requests footage, follow a consistent process. This reminds me of something that happened learned this lesson the hard way.. Preserve relevant footage promptly if there is a genuine incident or legal reason to do so, but do not keep an entire system indefinitely “just in case”. Consider whether other people appear in the clip and whether redaction is needed before disclosure. A review checklist should go beyond faces and number plates: check screens, badges, access codes, paperwork, reflections, audio, and details that reveal a person’s location or routine.

Retention periods and routine deletion

Set a documented retention period based on the purpose, the time needed to identify an incident, operational needs and relevant legal requirements. There is no single retention period suitable for every commercial building. A busy loading area and a low-risk internal corridor may not have the same needs.

Configure the system to overwrite or delete footage routinely after the agreed period. Confirm that deletion works in practice, including on backups, exported clips and supplier platforms. If footage needs to be kept for an incident, isolate the relevant clip, record why it is being retained, restrict access and review it until it can be deleted. Avoid retaining all footage because one clip may be needed.

Decide and document the retention period for each system.
Configure automatic deletion or overwriting where available.
Test the deletion settings and keep a record of the review.
Use a documented exception process for incident footage.
Delete retained copies when the reason for keeping them ends.

CCTV costs: ask for itemised prices, not a vague allowance

A common mistake in property articles and proposals is to discuss CCTV without listing prices. There is no reliable single incident investigation cctv price for commercial CCTV: costs depend on the number and type of cameras, cabling, storage, access controls, installation conditions and ongoing support. But a proposal should still show prices or a clearly itemised quote, so the landlord, tenant or board can compare options.

As a broad UK planning guide only, a basic single-camera installation is often around £300–£800, while a small multi-camera system may fall around £1,500–£5,000. Cloud storage or software may add roughly £5–£30 per camera per month. These are indicative ranges, not a guaranteed quotation; complex sites, specialist equipment and building works can cost substantially more.

Ask suppliers to separate equipment, installation, cabling, configuration, storage, maintenance, call-outs and removal costs. Confirm whether quoted prices include VAT and how long any subscription or support charges apply. Compare the total cost of ownership, not only the camera price. Also check whether the proposed specification collects more footage or stores it for longer than the stated security purpose requires.

A practical responsibility checklist

Before approving a new system or changing an existing one, use this short review:

Purpose: What security question does each camera answer?
Scope: Does the field of view capture only what is necessary?
Governance: Who decides the purpose and operating rules?
Access: Who can view, export or disclose clips, and how is this logged?
Storage: Where do exported clips end up, who can open them, and when are they deleted?
Retention: Is routine deletion configured, tested and recorded?
Lease: Do the lease terms security cameras cover installation, access, costs and removal?
Costs: Is there an itemised price for installation and ongoing operation?

Make responsibility clear before an incident

The strongest CCTV arrangements are not the ones with the most cameras. They are the ones where each camera has a defined purpose, its view is controlled, access is limited, and footage is deleted on schedule. Landlords and tenants should document who makes decisions and who handles the practical tasks, especially where systems overlap.

Review the system periodically and whenever the building layout, lease, security risks or supplier changes. If nobody can explain why a camera is there, who can open its footage, or when that footage disappears, the governance needs attention before the next incident.

Share this guide

Share on Facebook
Share on X (Twitter)