CCTV and Privacy Law in Australia: What Businesses Are Legally Allowed to Record
In Australia, businesses can legally use CCTV for a genuine security purpose, as long as they notify people (clear signage), avoid private areas like toilets and change rooms, and handle footage securely. There’s no single national CCTV law it’s a mix of the federal Privacy Act 1988 and each state’s surveillance devices laws. The biggest trap is audio: recording sound is far more restricted than video, and is often illegal without consent. Is CCTV legal for businesses in Australia? Yes video surveillance for a legitimate business purpose (security, safety, theft prevention) is lawful across Australia. What makes it compliant is how you do it: transparency, placement, and footage handling. The catch is that there’s no single “CCTV Act.” Three layers of law work together: Does the Privacy Act apply to your CCTV footage? This surprises a lot of business owners: video footage that can identify a person is “personal information” under the Privacy Act. If your business is covered, the Australian Privacy Principles (APPs) apply to your CCTV. Your business is generally covered by the Privacy Act if it: If the Act applies, you must: What can’t you record? The prohibited zones Regardless of your state, cameras must never be placed where people have a reasonable expectation of privacy. This is the clearest line in the law: The biggest trap: can CCTV record audio? This is where most businesses unknowingly break the law. Audio recording is far more restricted than video and many CCTV systems ship with microphones on by default. Under state surveillance devices laws, it’s generally a criminal offence to record a private conversation without the consent required in your state: Because a CCTV camera records conversations it isn’t a “party” to, capturing audio of customers or staff talking can land you in serious trouble almost anywhere in Australia. Practical rule: turn microphones off unless a lawyer has told you otherwise. Video-only CCTV is dramatically easier to keep compliant. What are the CCTV signage requirements? Signage is your main tool for staying compliant, because it provides the notice the law requires. In 2026, good practice is: Extra rules for recording staff: workplace surveillance Monitoring employees carries additional obligations, and they vary by state. New South Wales is the strictest example under its Workplace Surveillance Act, employers must give prior written notice and display visible signage, and covert surveillance is banned except in very limited, authorised circumstances. Wherever you operate, workplace CCTV is safest when: How long can (and should) you keep CCTV footage? The Privacy Act principle is simple: keep footage only as long as you reasonably need it, then securely delete or de-identify it. There’s no single mandated retention period for general business CCTV, but common practice is 30 to 90 days, unless footage is needed for a specific incident or investigation. Storing footage indefinitely creates risk it’s more data to secure, and it undercuts the “only keep what you need” principle. Secure storage and access controls matter as much as the recording itself. How to set up compliant CCTV: a checklist Byteway Expert Insight When we review CCTV setups for Melbourne businesses, two problems come up again and again and both are avoidable. The first is audio recording left switched on by default; owners have no idea their cameras are capturing conversations, which is often the single biggest legal exposure in the whole system. The second is placement: a camera angled so it clips a neighbour’s yard, or one quietly covering a staff break area, installed by someone focused on coverage, not compliance. What we’ve learned is that compliant CCTV is a design decision, not an afterthought. Before a single camera goes up, it’s worth mapping the purpose of each one, disabling audio unless there’s a specific lawful reason, masking private zones, and getting the signage and staff notice right. Most installers sell you cameras. The value is in setting the system up so the footage is actually usable and legal if you ever need it. Is Byteway a good choice for compliant CCTV in Australia? Yes for Australian businesses that want CCTV set up to be compliant, not just functional. Byteway installs business CCTV with compliance built in: purpose-based camera placement, audio disabled by default, privacy masking for private zones, correct signage guidance, secure footage storage with access controls, and sensible retention plus local support. It’s security that protects your business legally as well as physically. Where Byteway differs from a camera-only installer: No installer can give you legal advice but a good one sets your system up so staying compliant is easy, and points you to a lawyer for the grey areas. Install with confidence, not guesswork CCTV is one of the best security investments a business can make as long as it’s set up on the right side of the law. The mistakes (audio left on, cameras in the wrong spot, no signage) are easy to make and easy to avoid. Book a free CCTV compliance review. We’ll check your existing or planned setup against Australian privacy and surveillance rules placement, audio, signage, storage and retention and show you exactly what to fix. 👉 Get your free CCTV compliance review Frequently Asked Questions What can a business legally record on CCTV in Australia? Businesses can record video in areas with a legitimate security purpose — entrances, shop floors, stock rooms, car parks — provided there’s clear signage and footage is stored securely. You cannot record in private areas (toilets, change rooms), and recording audio is generally prohibited without consent. Is it illegal for CCTV to record audio in Australia? Usually yes. Recording private conversations via CCTV is generally a criminal offence under state surveillance devices laws, because the camera isn’t a party to the conversation. Since many systems enable microphones by default, the safest approach is to disable audio unless you have legal advice and explicit audio signage. Do I need signage for CCTV at my business? Yes. Clear, visible signage at entrances and monitored areas provides the legal notice that people









