CCTV in Offices and Workplaces in India: What's Legal, What's Not (2026)

Yes, CCTV in offices is legal in India — in work areas, entrances, corridors and common spaces, for legitimate purposes like security and safety. It is not legal in washrooms, changing rooms or anywhere with a reasonable expectation of privacy, and covert monitoring of employees without notice invites serious legal risk under privacy law and the DPDP Act 2023.

Where cameras are fine — and where they never are

Generally lawful: entry/exit points, reception, corridors, work floors, server rooms, cash-handling areas, parking, perimeter.

Never: washrooms, changing/nursing rooms, inside washup areas of creches. Courts treat these as spaces with a reasonable expectation of privacy; K.S. Puttaswamy (2017) established privacy as a fundamental right, and surveillance in such spaces has no legitimate justification.

Grey zones to handle carefully: cafeterias and break rooms (allowed with clear notice and a security rationale, but avoid audio), individual cabins (proportionality matters — why is a camera needed there?), and union/meeting rooms (avoid; chilling-effect claims are real).

What the DPDP Act 2023 means for workplace CCTV

Footage of identifiable employees and visitors is personal data. Practical obligations for employers:

• Notice: visible signage plus a line in employment/visitor policies stating that CCTV operates, its purpose, and retention period.
• Purpose limitation: collected for security/safety — using the same footage to micro-track productivity is a different purpose and a common overreach complaint.
• Security safeguards: access control on live feeds and recordings, audit trails, encrypted storage. An open DVR password shared on WhatsApp is a breach waiting to be reported.
• Retention and deletion: keep footage only as long as needed (commonly 30–90 days) and delete on schedule.
• Employee rights: respond to access/grievance requests about their data.

Audio is the trap most offices miss

Many modern cameras ship with microphones ON. Continuous audio interception of conversations sits in far riskier legal territory than video in India. Unless you have a specific, documented justification, disable audio recording in work areas.

Monitoring employees vs monitoring premises

The legal and cultural line: cameras that protect premises, assets and people are widely accepted; cameras positioned to watch a specific employee's screen or count their breaks generate grievances, attrition and legal exposure. If productivity is the concern, use workforce tools with consent — not the security system.

Five-step compliance checklist for Indian employers

1. Map every camera: location, field of view, purpose. Remove or re-aim any covering a privacy space.
2. Put up signage at entrances and add a CCTV clause to HR and visitor policies (purpose + retention).
3. Turn off audio unless specifically justified and documented.
4. Restrict access: named users, role-based viewing, logged exports; review the access list quarterly.
5. Write the one-page retention policy (period, deletion, incident holds) and follow it.

Why cloud systems make compliance easier

Role-based access, per-user audit logs, encrypted storage and automatic retention expiry are native to cloud video platforms — the exact controls the DPDP Act expects — whereas a shared-password DVR offers none of them. If your office still runs on a DVR in a cupboard, compliance is a strong reason to modernise, whether you buy or rent.

Frequently asked questions

Can my employer watch CCTV live from a phone?

Yes, if access is authorised, purpose-bound and logged. Uncontrolled sharing of feeds is where employers get into trouble.

Is employee consent required for office CCTV?

Clear notice (signage + policy) with a legitimate purpose is the practical standard; monitoring hidden from employees is the high-risk scenario.

Can CCTV footage be used in disciplinary action?

Yes, if it was collected lawfully for a stated purpose that covers the conduct, and handled with chain-of-custody discipline.

Are cameras allowed in a co-working space we rent?

The operator's cameras cover common areas under their policy; inside your private cabin, you decide — with the same notice and privacy rules applying to your team.

This article is general information, not legal advice. Rules evolve and state-specific requirements exist — consult counsel for your specific setup.