CCTV Surveillance Laws in Australian Workplaces: What You Need to Know

CCTV surveillance is standard practice in Australian workplaces. But using it without understanding the legal framework can expose your business to significant liability — from privacy complaints to employment disputes and regulatory fines.

This guide covers the key legal obligations Australian businesses must understand before installing or operating CCTV in the workplace.

How Many Australian Businesses Use CCTV?

Workplace surveillance is widespread in Australia. According to research from the University of NSW’s Cybersecurity and Data Governance Research Network, the majority of Australian workplaces with more than 20 employees operate some form of CCTV or electronic surveillance. In retail, hospitality, and industrial settings, CCTV penetration approaches near-universal levels.

The growth of AI-enhanced video analytics and intelligent CCTV has expanded the functional capability of workplace surveillance systems significantly — making the legal framework more important to understand, not less.

The Key Legal Frameworks

The Privacy Act 1988 (Commonwealth)

The Privacy Act 1988, and specifically the Australian Privacy Principles (APPs) contained in Schedule 1, applies to organisations with an annual turnover of more than $3 million (and to certain smaller organisations in specific sectors).

APP 3 governs the collection of personal information. CCTV footage of identifiable individuals constitutes personal information. Under APP 3, you may only collect personal information that is reasonably necessary for your business functions or activities.

Key obligations under the Privacy Act for CCTV operators:

You must have a lawful reason to collect the surveillance footage
You must take reasonable steps to notify individuals that they are being recorded (typically via signage)
Footage must be stored securely and not disclosed to third parties without consent (except in limited circumstances, such as disclosure to police)
Individuals generally have the right to access footage of themselves
Footage must not be retained longer than is necessary for the purpose it was collected

NSW Workplace Surveillance Act 2005

In New South Wales, the Workplace Surveillance Act 2005 imposes specific requirements on employers conducting workplace surveillance — including CCTV.

Notice requirements: Employers must give employees at least 14 days’ written notice before installing a new CCTV system, unless the surveillance is covert. Covert surveillance requires a covert surveillance authority issued by a Magistrate — it is not available simply to satisfy employer curiosity or general suspicion.

Prohibited surveillance: The Act prohibits surveillance of employees in change rooms, toilets, or shower facilities. This prohibition is absolute — there are no exceptions.

Email and computer surveillance: The Act also governs electronic surveillance of employee email and computer usage. Separate notice requirements apply.

Penalties: Contravening the Workplace Surveillance Act can result in fines of up to $55,000 for corporations and $5,500 for individuals.

Other State and Territory Legislation

Other Australian states and territories have their own workplace surveillance laws:

Victoria: Surveillance Devices Act 1999
Queensland: Invasion of Privacy Act 1971
ACT: Workplace Privacy Act 2011
WA: Surveillance Devices Act 1998

If your organisation operates across multiple states, you must comply with the requirements of each jurisdiction.

CCTV Signage: What’s Required?

The most practical compliance requirement is adequate signage. Under the Privacy Act and most state workplace surveillance laws, you must notify individuals that CCTV is operating. The standard approach is to place clear, visible signs at all entry points to surveilled areas.

Effective CCTV signage should include:

A statement that CCTV is in operation
The name of the operating company or responsible party
Contact details for enquiries about the footage

Generic “CCTV in operation” signs without contact details may be insufficient under the Privacy Act’s notification requirements for organisations covered by the APPs.

How Long Can You Retain CCTV Footage?

There is no universal statutory retention period for CCTV footage in Australia — the obligation is that you must not retain footage longer than is necessary for the purpose it was collected.

In practice, industry standards vary:

Retail loss prevention: typically 30–90 days
Construction sites: typically for the duration of the project plus a short review period
Corporate facilities: typically 30–60 days
Government and regulated industries: may be subject to sector-specific requirements

If footage captures an incident that may lead to legal action, you should preserve it immediately and seek legal advice on retention obligations.

Using CCTV Evidence in Employment Disputes

CCTV footage is regularly used as evidence in unfair dismissal proceedings before the Fair Work Commission. However, footage obtained in breach of the Workplace Surveillance Act (such as covert surveillance without authority, or surveillance in prohibited areas) may be inadmissible or may expose your organisation to separate liability.

Before relying on CCTV footage in an employment matter, confirm that the system was installed and operated in compliance with the applicable legislation.

Intelligent CCTV and AI Analytics: Additional Considerations

Modern intelligent CCTV systems use AI-powered video analytics to perform functions beyond basic recording — including facial recognition, behaviour analysis, and crowd density measurement. These capabilities introduce additional privacy and ethical considerations under the Privacy Act.

Facial recognition in particular is subject to increasing regulatory scrutiny. The Office of the Australian Information Commissioner (OAIC) has published guidance indicating that biometric surveillance data constitutes sensitive information under the Privacy Act — attracting higher obligations than standard CCTV footage.

How Barrick Group Can Help

Barrick Group’s technology solutions practice designs and implements CCTV and intelligent video surveillance systems with compliance built in — from signage standards through to data retention policies and access controls.

Our team can review your current CCTV setup to identify compliance gaps, recommend appropriate system configurations, and ensure your surveillance operations meet the requirements of the Privacy Act and applicable state legislation.