Is CCTV surveillance legal in India?
Reviewed by Confidential Dispatch Editorial Team · Updated 28 Oct 2026 · 5 min read
There’s no single law that licenses or bans CCTV in India, and no permit needed to install one. What actually governs a camera instead is a patchwork: the constitutional right to privacy, the Information Technology Act’s ban on capturing someone in a private moment without consent, and increasingly India’s DPDP Act, which treats footage of an identifiable face as personal data with its own rules on notice, purpose and how long it can be kept.
Educational resource only. This explains what actually governs CCTV surveillance in India, from the constitutional right to privacy through to India’s Digital Personal Data Protection Act, 2023 (DPDP Act); it is not formal legal advice.
The situation
You’ve probably noticed a camera watching you dozens of times today: at the building entrance, in a shop, on the street corner, maybe in the office lift. It’s easy to assume all of this is either fully regulated somewhere or a free-for-all. Neither is quite right. CCTV in India is governed by general principles rather than one specific statute, and which of them applies depends on where the camera is and what it can see.
Is there a dedicated CCTV law in India?
No, India doesn’t have one law that specifically regulates CCTV cameras
What exists instead is the Supreme Court’s 2017 ruling in Justice K.S. Puttaswamy v. Union of India, which recognised privacy as a fundamental right under Article 21 of the Constitution, meaning any surveillance, CCTV included, has to be justified by a legitimate purpose and can’t be arbitrary or excessive. Layered on top of that are specific statutes that apply to particular situations: the Information Technology Act, 2000 where a camera captures something intimate or private, and now the DPDP Act where the footage counts as personal data. There’s no single rulebook, but that doesn’t mean cameras operate in a legal vacuum.
Does the DPDP Act actually apply to CCTV footage?
Yes, where the footage shows a face or other detail that can identify a specific person, which most CCTV footage does
A recognisable image counts as personal data under the DPDP Act, which makes whoever operates the camera, a shop, an office, a housing society, a Data Fiduciary with real obligations: giving notice that recording is happening, limiting use to the purpose stated (Section 5, Section 6), keeping the footage secure (Section 8), and not holding onto it longer than that purpose requires.
The open question is the legal basis for routine, everyday CCTV, the kind watching a shop floor or a building entrance. The DPDP Act’s specific list of uses that don’t need consent (Section 7) doesn’t include a general “security camera” category the way some other countries’ privacy laws do; it covers narrower situations like an employer safeguarding itself from loss (relevant for workplace cameras specifically), medical emergencies, or state functions. In practice, a “CCTV in operation” sign is treated as adequate notice almost everywhere, and that’s the accepted norm, but whether it also satisfies the Act’s stricter definition of valid consent for every passerby hasn’t been tested by the regulator yet.
What can’t a camera legally be pointed at?
Private and sensitive spaces stay off-limits regardless of who owns the camera or why it’s there
Section 66E of the IT Act makes it an offence to capture or publish an image of someone’s private area or a private act without consent, in circumstances where they’d reasonably expect privacy, and this applies whether the capture comes from a phone or a fixed CCTV camera. The Bharatiya Nyaya Sanhita, 2023’s voyeurism provision (Section 77) covers related ground for images of a woman engaged in a private act. Restrooms, changing rooms and similar spaces are the clearest cases; a camera can watch the corridor outside, not what happens inside.
- Generally fine: entrances, corridors, parking areas, shop floors, common areas, with visible signage.
- Not fine, regardless of purpose: washrooms, changing rooms, or any space where someone has a reasonable expectation of full privacy. A camera found in one of these is a criminal matter, and you can report it to the police.
Do some states or cities add their own rules?
Yes, so the full answer can depend on where you are
Delhi, for instance, has its own published rules for regulating CCTV systems that set out conditions for certain installations within the NCT, on top of the general national framework above. Other states and cities have introduced their own guidelines for particular contexts, like schools or public safety cameras, over the years. The general principles (privacy, the IT Act, the DPDP Act) apply everywhere; whether an additional local rule also applies depends on where you are and what kind of installation it is.
FAQ
Do I need police or government permission to install a CCTV camera at my home or shop?
No, not as a general rule. There’s no national licensing requirement for ordinary CCTV installation, though a specific state or city rule, like Delhi’s, can add its own conditions in some cases.
Can my neighbour point a CCTV camera at my house or balcony?
Not lawfully if it captures the inside of your home or a space where you’d reasonably expect privacy. This is one of the more common CCTV disputes in India, and the answer comes from the right to privacy, not a CCTV-specific rule.
Is it legal for a business to record me without telling me?
Not really, under the DPDP Act’s notice requirement, if the footage identifies you. Visible signage is the accepted minimum notice in practice, though a hidden camera with no signage at all sits on much shakier ground.
Does the DPDP Act mean every shop or office needs my consent to run CCTV?
Not in the strict opt-in sense. Most operators rely on notice-based practice rather than individually collected consent, since asking every visitor to sign a consent form isn’t practical, but this remains one of the DPDP Act’s less clearly settled areas for routine CCTV specifically.
Can CCTV footage of me be used as evidence against me?
Yes, if it’s properly certified. Like other electronic records, CCTV footage needs to clear the certification requirement under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 before a court will treat it as reliable evidence.
Every article is checked against the current law and the judgments it cites before it is published.
Updated 28 October 2026 · Not legal advice.
