Privacy & Data ProtectionVolume 1 · Issue 2 · July 2026
Because you can does not mean you should
A camera sees more than a burglar ever will. The footage of a recognisable person is their personal data, protected under India’s Digital Personal Data Protection Act, 2023 — and the people in view, your family, your domestic help, your visitors, your neighbours, have a right to privacy and to dignity. This dossier is the other half of security: how to watch lawfully, proportionately and decently. Least intrusive means, narrowest view, shortest memory, fewest eyes. It is guidance, not legal advice.
CCTV Privacy Guide for India (2026): Watching Responsibly, Lawfully and Decently
The footage of an identifiable person is personal data under India's DPDP Act 2023. This CCTV privacy guide shows homeowners, RWAs and small businesses how to watch responsibly, lawfully and decently, and where restraint matters most.
Read itThe law & ethics
DPDP, privacy by design, AI & faces
Privacy by design01Privacy by Design for Security Systems in India (2026): Build It In, Not On
Design privacy into a home, RWA or small-office security system from the first sketch instead of bolting it on after complaints. A plain-English, DPDP-aligned plan: purpose, minimisation, secure defaults, retention, notice and a design-stage checklist.
Ethical AI02Ethical AI Surveillance in India (2026): Restraint, Oversight and Dignity
Modern cameras ship with face recognition, behaviour analytics and auto alerts. Learn the ethics of AI surveillance in India: real limits, bias and error, why most homes should switch clever features off, and how to keep meaningful human oversight when they stay on.
Face recognition03Facial Recognition Privacy in India (2026): The Face Is Not Just Another Password
A face is sensitive biometric data you cannot change if it leaks, and unlike a PIN it is captured passively, at a distance. Learn the consent, minimisation and erasure duties before enrolling anyone's face into a home, RWA or small-office system.
Where CCTV belongs
Placement, context, signage & audio
Where not to install04Where Not to Install CCTV in India (2026): The No-Go Zones
Some places a camera must never point: bathrooms, bedrooms, a worker's room, a neighbour's window. Learn the CCTV no-go zones for an Indian home or flat, the borderline spots to handle with care, and how to fix a camera that reaches too far.
Common areas05CCTV in Common Areas in India (2026): The RWA Privacy Playbook
Common-area cameras at the gate, lobby, lift and parking are normal and useful. The issues are governance and proportion. Learn how an RWA runs common-area CCTV lawfully under the DPDP Act, with signage, a custodian, retention limits and residents' rights.
Apartments06CCTV in Apartments in India (2026): Your Camera, Your Neighbour's Privacy
A camera at your own flat door can be reasonable — if its view stops at your threshold. Learn to protect your entrance without watching the neighbour's door, balcony or the shared corridor, the DPDP-grounded, neighbourly way.
Workplaces07CCTV in Workplaces in India (2026): Security Without Surveilling Staff
An employer can lawfully protect a shop, office or clinic with cameras, but staff keep their dignity and privacy. Learn where CCTV in workplaces is legitimate, where it must never go, and how to write a fair, DPDP-aligned monitoring policy.
Signage08CCTV Signage in India (2026): Notice That Deters and Keeps You Compliant
A CCTV notice both deters intruders and discharges a transparency duty under the DPDP Act, 2023. What a good sign says, where to place it, why it should be bilingual, and why signage is never an excuse to over-record.
Audio & consent09CCTV Audio Recording in India (2026): The Law, Consent & When to Use It
Switching on your camera microphone raises privacy and consent questions in India. Learn the law and ethics of CCTV audio recording, how mics work, audio quality limits, and where sound genuinely helps versus where you should leave it off.
Some places a camera must never point: bathrooms, bedrooms, changing rooms and into a neighbour’s private space. The rest is about proportion — and telling people they are being recorded.
People & personal data
Children, workers, visitors & biometrics
Children10Childrens Privacy and CCTV in India (2026): Protecting the Youngest
Children need extra privacy protection, and DPDP treats their data with special care. Learn how to use home and community CCTV around children safely: baby monitors, no cameras in bedrooms, keeping footage off social media, and never profiling a child.
Domestic workers11Domestic Worker Privacy in India (2026): Security With Dignity
Home cameras are for security, never to watch, control or shame the people who work in your house. A humane, worker-first guide to CCTV, footage and dignity for domestic workers in India, grounded in the DPDP Act 2023.
Biometric data12Biometric Data Protection in India (2026): Guarding What You Cannot Change
Your fingerprint and face cannot be reissued like a password. If a biometric lock, attendance system or RWA gate holds them, they must be handled with real care. Learn DPDP-aligned duties, minimisation, a non-biometric alternative, and your right to refuse and erase.
Visitors13Visitor Data Protection in India (2026): The Gate Register Problem
Your gate collects visitors' names, phones, photos and often their ID cards. Most gates gather far more than they need. Learn how a home, RWA or office can minimise visitor data, use a gate app responsibly, and protect people under the DPDP Act 2023.
Access-control data14Access Control Data Privacy in India (2026): What the Entry Logs Reveal
An access-control entry log is a quiet movement diary that reveals when a person comes and goes. Learn to keep card, PIN and access-log data lawfully and proportionately under the DPDP Act 2023 — for security and audit, never to monitor or control people.
The people most watched often have the least say. A domestic worker, a child, a visitor and a tenant each keep their dignity and their rights — security is never a licence to profile, coerce or punish them.
Footage & incidents
Retention, sharing, cloud, police & breaches
Retention15CCTV Footage Retention in India (2026): How Long to Keep It, and When to Delete
Footage of identifiable people is personal data, so keep it only as long as its purpose needs, then delete. A minimisation-first guide to setting a CCTV footage retention window for a home, RWA or small office, and preserving only what an incident requires.
Sharing16CCTV Footage Sharing in India (2026): Who You Can Show It To
A CCTV clip that identifies someone is personal data, and sharing it is a disclosure with privacy, defamation and DPDP consequences. Learn who footage can lawfully go to in India, why public name-and-shame is off limits, and how to share the minimum with due process.
Cloud data17Cloud CCTV Data Protection in India (2026): Your Footage on Someone Else's Computer
When CCTV footage goes to the cloud, it lives on a company's servers and you stay responsible for it. Learn cloud CCTV data protection in India: DPDP-aligned duties, securing your account, and the questions to ask a provider before you subscribe.
Police requests18Responding to Police Requests in India (2026): Handing Over CCTV Footage the Right Way
A police officer asks for your CCTV footage. Cooperate with a lawful investigation, but protect everyone in the clip too. Learn how to verify the request, share only the relevant window, preserve the original, keep a record, and when to get legal advice.
Breach response19Data Breach Response in India (2026): When Your Security System Is the Leak
When your camera, DVR, cloud account or biometric reader leaks personal data, panic helps no one. This calm, step-by-step data breach response plan for Indian homes and RWAs covers contain, assess, notify and remediate, plus what never to do.
Footage is a liability as much as an asset. Keep it only as long as the purpose needs, share it with care and due process, and have a plan for the day something leaks. When in doubt, take legal advice.
Compare it, and secure it
Security Comparisons
Choosing between options with a privacy angle — local vs cloud storage, face vs card entry, on-premise vs remote monitoring — laid out side by side.
Secure itSecurity-System Cybersecurity
Privacy needs security. Lock down the cameras, network and cloud that hold personal data so the footage cannot leak in the first place.