Can your workplace put you under CCTV surveillance?
Reviewed by Confidential Dispatch Editorial Team · Updated 28 Oct 2026 · 5 min read
Yes, generally, and your employer doesn’t need to individually ask your consent to do it. The DPDP Act gives employers a specific legal basis for processing employee data to safeguard themselves from loss, which covers security-driven CCTV. What it doesn’t cover is filming you everywhere: restrooms, changing areas and similar spaces stay off-limits regardless of the employer’s reason, and the footage still comes with rules on notice, use and how long it’s kept.
Educational resource only. This explains what India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and related law say about CCTV surveillance of employees; it is not formal legal advice.
The situation
You clock in one morning and notice a new camera pointed at your desk, or you’re told the office is adding CCTV coverage “for security.” It’s natural to wonder whether your employer can actually do this without asking you first, and where the line sits between reasonable workplace security and being watched all day.
Does an employer need my consent for CCTV?
No, not in the same way an app needs your consent before collecting your data
The DPDP Act sets out specific situations where a Data Fiduciary, your employer here, can process personal data without asking first, and employment is one of them (Section 7(i)). This covers processing “for the purposes of employment or those related to safeguarding the employer from loss or liability,” which is squarely why most workplace CCTV exists: preventing theft, protecting property, and general premises security.
What’s the actual legal basis for it?
Section 7(i) of the DPDP Act, built around safeguarding the employer from loss, corporate espionage and protecting trade secrets or property
This is a real legal basis, not a loophole. Legal commentators have flagged it as broadly worded: so much can be described as employment-related that the clause leaves room for an employer to justify wider surveillance than its named examples suggest, and no court or regulator has yet said where that line sits. If footage collected under this basis gets used for something clearly unrelated, disciplinary action over something that has nothing to do with loss or security, for instance, that’s a separate question about whether the use still fits any employment-related purpose at all.
Where can’t a workplace camera go?
Restrooms, changing rooms, prayer or breastfeeding rooms, and similar spaces are off-limits, whatever the stated security reason
This isn’t a DPDP-specific rule; it comes from the same right-to-privacy principle and Section 66E of the IT Act, which criminalises capturing a private area or act without consent, that apply to CCTV generally. An employer’s interest in preventing loss doesn’t extend to spaces where employees have a reasonable expectation of full privacy.
- A defensible workplace camera: entrances, common work areas, stockrooms, cash counters, server rooms, parking, all with visible notice that recording is in progress.
- Not defensible, regardless of the employer’s stated reason: restrooms, changing areas, or any space where privacy is reasonably expected.
What about audio, or footage used for performance reviews?
Audio recording adds a layer most workplace CCTV deliberately avoids, and using footage to score your day-to-day performance stretches past what loss-prevention covers
Recording sound alongside video captures more personal data than image alone, voice, private conversations overheard incidentally, and carries meaningfully higher legal risk than video-only monitoring; common practice is to keep workplace CCTV audio-off by default. Separately, if footage originally justified as security monitoring is instead used to track how long you’re at your desk or to build a performance case against you, that’s a different purpose from the one the camera was justified under, and you can ask your employer what the stated purpose is.
What you can do about it
Know the reasonable ground rules, and where to go if a specific camera crosses them
- Ask what the notice actually saysA workplace running CCTV should have visible signage or a policy document stating that recording happens and roughly why; if there’s none, raise it with HR as a notice gap.
- Check that sensitive spaces are genuinely camera-freeIf you spot one in a restroom, changing area or similar space, that’s a criminal matter, and you should report it to the police.
- Ask about retention and accessParticularly if you’re ever shown footage of yourself out of context. Who can view it, and for how long it’s kept, are fair questions to put to HR or a manager.
- Raise a mismatch between stated purpose and actual useIf footage justified as “security” is being used to monitor your general conduct or performance, say so directly; that’s a legitimate DPDP question about purpose limitation, not just an office grievance.
- Escalate outside the company if it doesn’t resolve internallyOnce the Data Protection Board of India is fully operational, employees will be able to raise this kind of complaint with it directly; for now, a written complaint to your employer’s grievance channel is the practical first step.
FAQ
Can my employer watch me on CCTV all day without telling me?
Not under the DPDP Act’s notice requirement. Visible signage or a stated monitoring policy is the accepted minimum; a hidden camera with no notice at all is on much weaker legal footing.
Can CCTV footage of me be used to fire me?
It can be used as evidence in a disciplinary process if what it shows is directly relevant, theft or a safety violation, for example. Using routine security footage to build a broader performance case is a stretch of the purpose it was justified under.
Is it different if I work from a company laptop with a webcam, instead of office CCTV?
Yes. Monitoring on a company laptop, webcam included, raises its own consent and scope questions, separate from fixed workplace CCTV.
Can my employer record audio through workplace CCTV?
It’s technically possible, but it carries more legal risk than video alone and most employers avoid it for that reason. If you notice audio recording alongside video, ask why.
What if I think the CCTV is targeting me specifically, not general security?
Raise it directly and ask for the stated purpose in writing. A camera newly installed and aimed at one person’s desk, rather than a shared area, is harder to justify purely as general loss-prevention.
Every article is checked against the current law and the judgments it cites before it is published.
Updated 28 October 2026 · Not legal advice.
