If you quote for CCTV installs in apartment blocks, GDPR isn’t just legal wallpaper – it shapes what you can and can’t do. Especially when it comes to access to footage.

Some CCTV installers are still quoting jobs without fully understanding how GDPR changes the game in communal living spaces.

And that could leave you, or your client, exposed.

Misjudge this, and you could open your client (or yourself) up to GDPR complaints, ICO enforcement or even a fine.

The CCTV Installation GDPR Question That Sparked It All

We asked this on LinkedIn a few years ago:

When installing CCTV cameras in a block of privately-owned apartments, can you give the mobile app login to all residents so they can view the footage?

Fire & Security professionals were quick to respond. Here’s what they said…

What the Industry Thinks

Dave Hopkins, of RDS Fire and Security, said:

“Giving residents access removes all control over what happens to that footage. A resident with access to an app could easily contravene the system data retention policy. So I would say no for that reason alone.”

Tom Crown, of Falcon Fire and Security, offered a more conditional take:

“It depends on who the operator is. If the management company has a proper CCTV policy, with signage and restricted access by user group, it could be feasible.”

Eoghan Kenny, of The Compliance Team, added:

“This isn’t domestic CCTV. The Management Company is the data controller. A DPIA and full risk assessment are essential. If residents want access, there must be a legal basis for processing.”

ICO Guidance:

“You can’t rely on the domestic CCTV exemption if all residents have access to the footage. That takes it outside of the exemption.”
“Registration is required. You can complete it through the ICO’s official portal at ico.org.uk.”

This is a crucial point for blocks of flats: if footage is shared with residents or accessed remotely, they likely lose the domestic exemption — meaning the management company or agent becomes the data controller and must register with the ICO.

The registration involves a small annual data protection fee (typically £40–60). It’s not something you, as the installer, pay — but it’s a potential cost your client needs to be aware of when making decisions about system design and access.

So What Does This Mean for Installers?

It means that when you’re quoting for CCTV in shared buildings, the minimum questions you must ask:

  • Who is the data controller?
  • Will footage be accessible to residents?
  • Is there a written CCTV policy in place?
  • Has a DPIA been done?

You may be quoting for a job that looks like a simple domestic install – but it isn’t. The legal responsibilities are far greater.

Why Site Surveys Matter

An enquiry might come in for a CCTV system for a single flat within a block. But the property may fall under the rules of a managing agent or a residents’ management company.

If you don’t ask the right questions on your site visit, your quote could fall short.

We recommend:

  • Using a survey script with GDPR prompts
  • Recording answers via tablet or notebook
  • Noting any privacy concerns discussed

Clients have told us they prefer it when installers take notes. It gives them confidence that the quote will reflect what they actually asked for.

Get the CCTV Installation GDPR Checklist

Want a quick way to make sure you’re asking all the right questions?

📋 Download our FREE 17-Point GDPR Checklist for CCTV in Apartment Blocks – and quote with confidence.

👉 Click here to get the checklist

Why Are We Telling You This?

Because at Lollipop Local, we’re specialists in marketing Fire & Security companies. That includes helping you stand out with content that reflects your technical knowledge and professionalism.

Understanding GDPR in communal CCTV systems is just one more way to build trust, credibility, and expertise with your ideal customers.


Want to Stand Out as the Installer Who Gets It Right?

If you’re quoting CCTV installs in blocks without considering GDPR… you’re one job away from a major headache.

Don’t be the one quoting jobs that later fall apart because GDPR wasn’t considered

Want help turning your GDPR know-how into content that wins clients?
👉 Visit our Fire & Security Installer Hub

We’ll help you show off what makes your business different – and trustworthy.

Let’s turn your know-how into content that wins work.

PS: Curious what the regulator expects? Here’s the ICO’s official CCTV checklist. It’s useful for understanding the legal side — but our version is built specifically to help you quote like a pro.

Struggling to get enough of the Right enquiries?

Since 2010, Lollipop has helped Fire & Security businesses like yours stand out in a crowded market and win millions of pounds of work…

Our Fire & Security Visibility Engine™ gets the Right Message to the Right Person at the Right Time. So you can win more of the Right Work with less effort.

Curious how it could work for your business?

"Genuine enquiries… at a steady pace"
Phil Clarke, CCTV Hire & Sales
Book your free Visibility call with Jo

Limited slots available — book now to secure yours

Happy Fire & Security director

Trusted by the Fire & Security industry for websites, lead generation and sales since 2010...