Tenants in Wales often face situations where CCTV footage could clarify a dispute, show unauthorised entry, or prove damage. This guide explains how renters can ask for recordings, what information to include in a data subject access request, when landlords or property managers must respond, and what to do if a request is refused. It covers privacy rights under the Data Protection Act, practical steps to collect evidence, and how to escalate to the Information Commissioner's Office or to the First-tier Tribunal (Property Chamber) if needed. The language is practical, avoiding legal jargon, so tenants can follow clear steps, meet deadlines, and use official forms to protect their privacy and tenancy rights in Wales.
How CCTV and data protection works in Wales
CCTV systems that record images of identifiable people create personal data. The controller (often the landlord, managing agent or building owner) must have a lawful basis to record and must handle requests for footage under UK data protection rules and the Data Protection Act 2018. Tenancy law for England & Wales such as the Housing Act 1988 and the Rent Act 1977 remain relevant for tenancy disputes and evidential issues when footage is used in housing cases[4][5].
Who controls the footage?
The person or organisation deciding why and how CCTV is used is the data controller. In flats or managed blocks this can be a freeholder, managing agent or landlord. If you are unsure who controls the footage, ask the landlord or property manager in writing and keep a copy of the request.
How to request CCTV footage
Start by making a clear data subject access request that describes the recording you want (date, time, camera location and why you need it). See the ICO guidance on subject access requests for public-facing advice and wording ICO guidance on subject access requests[1]. Explain whether you are the person recorded or a tenant acting for a household member and include proof of identity if necessary.
- Date and time of the recording you want (be as precise as possible).
- Location or description of the camera (for example "stairwell camera by flat 3B").
- Your name, tenancy address and contact details so the controller can reply.
- A short reason for the request and whether you need the footage for evidence in a dispute.
- Any supporting details such as incident reference numbers or photos that help identify the recording.
Under data protection rules, controllers must normally respond to a subject access request within one month; in complex cases this can extend by a further two months but you should be told if an extension is applied. If the footage contains images of other residents, the controller may need to redact parts of the video to protect third parties.
If your request is refused or delayed
If the controller refuses or fails to provide the footage within the statutory timescale you can complain to the Information Commissioner's Office or ask for further explanation. The ICO explains how to make a complaint and what remedies may be available How to make a complaint to the ICO[2]. If a dispute about the footage relates to your tenancy rights or possessions and cannot be resolved, you can consider applying to the First-tier Tribunal (Property Chamber) for a remedy or for evidence directions First-tier Tribunal (Property Chamber)[3].
- Subject access request (no form number): used when you ask the controller directly to provide copies of personal data; include specific details about the footage and an example incident to help staff locate recordings.
- Report a breach to the ICO (no form number): use the ICO complaint process if the controller will not comply; for example, after a two-month delay with no valid explanation.
- Application to the First-tier Tribunal (Property Chamber) (form details on GOV.UK): used when a tenancy dispute requires a legal remedy or formal evidence order; for example, if a landlord refuses to release footage that would show property damage.
FAQ
- Can my landlord view CCTV of communal areas?
- Yes, if they are the data controller and have a lawful basis, but they must process the footage fairly and respect privacy; you can request copies by making a subject access request.
- How long will a controller take to provide CCTV footage?
- Controllers normally must respond within one month of a subject access request; complex requests may take up to three months with a clear reason for the delay.
- What if footage shows criminal behaviour or damage?
- If the footage shows a crime, report it to the police and tell the controller you have asked for footage for a police investigation; you can also keep records and complain to the ICO or seek tribunal help if necessary.
How-To
- Identify the date, time and camera location you need and collect any supporting photos or incident details.
- Write a clear subject access request naming the controller, describing the footage, and asking for a copy or a time-limited viewing.
- Send the request by recorded post or email and keep proof of delivery; keep a copy for your records.
- Wait for the controller to respond within one month; if refused ask for a written reason and any internal review process.
- If unresolved, complain to the ICO and consider applying to the First-tier Tribunal (Property Chamber) for an order or evidence directions.
Key Takeaways
- Make a precise written request with dates, times and camera locations to help locate footage quickly.
- Controllers usually must reply within one month; note any lawful extension.
- If refused, complain to the ICO and consider the First-tier Tribunal for tenancy-related disputes.
Help and Support / Resources
- Welsh Government: Housing information
- First-tier Tribunal (Property Chamber) on GOV.UK
- Information Commissioner's Office (ICO)
