How long can you legally keep CCTV footage?
Permission & regulations

How long can you legally keep CCTV footage?

The retention principle and what it means in practice.

The short answer

There is no fixed legal maximum for keeping home CCTV footage, but where your system is covered by UK GDPR and the Data Protection Act 2018 — because it captures beyond your boundary — you must keep footage only as long as you genuinely need it and no longer. In practice, most home systems overwrite on a loop after a few days to a few weeks, which is usually proportionate for routine security. If footage captures an incident you may need for police or insurance, save that clip and keep it as long as that purpose requires, then delete it. Indefinite retention of everyday footage is hard to justify. This is general guidance — follow the ICO's domestic CCTV advice.

Retention is one of the core data protection duties for home CCTV that captures other people. The rule is principle-based rather than a fixed number of days, which gives you sensible flexibility.

Keeping footage

There is no single legal number

People often expect a precise answer — 30 days, perhaps — to how long CCTV footage can be kept. For domestic CCTV there is no fixed legal maximum. Instead, where your system is covered by UK GDPR and the Data Protection Act 2018 (because it captures people beyond your own boundary), retention is governed by a principle: personal data should be kept for no longer than is necessary for the purpose it was collected. That purpose, for home CCTV, is generally protecting your property.

This principle-based approach is deliberately flexible. It does not tie you to a rigid period, but it does mean you should be able to justify how long you hold footage. Keeping everyday recordings indefinitely, for no particular reason, runs against the principle. Holding footage of an actual incident while you report it to the police or your insurer is entirely reasonable. The test is always whether you still need the footage for a legitimate purpose.

What happens in practice

In day-to-day use, the retention question largely answers itself, because most home CCTV systems record on a continuous loop and automatically overwrite the oldest footage once storage fills up. Depending on the number of cameras, the resolution and the size of the storage, this typically gives a window of a few days to a few weeks before footage is replaced. For routine security, that is usually a proportionate period — long enough to notice and act on an incident, short enough that you are not hoarding images of every passer-by.

You can often adjust this. Many systems let you set the overwrite period or storage allocation, and choosing a sensible window rather than the longest possible is good practice where your cameras capture beyond your boundary. The aim is a retention period that matches your genuine need: enough time to spot and preserve anything important, without keeping ordinary footage longer than necessary. If you are unsure, a window of around one to two weeks for routine footage is a commonly used, defensible starting point, though there is no mandated figure.

Rule of thumb: let routine footage overwrite within a sensible window, but save any clip showing an incident before it is overwritten — then delete that saved clip once it has served its purpose.

How storage size affects retention

The period your system actually keeps footage is largely a function of storage capacity, the number of cameras, and the recording quality. A single camera recording at modest resolution onto a large drive may retain several weeks, while four high-resolution cameras recording continuously onto a small drive might overwrite within a few days. This is worth understanding, because it means retention is not just a setting you choose but a physical limit of your hardware, and it can change if you add cameras or raise the recording quality.

Some systems reduce the storage burden by recording only on motion or person detection rather than continuously, which can extend how far back footage reaches while capturing the events that matter. Smart cameras with AI detection are particularly suited to this. Whichever approach you use, it is sensible to check occasionally how far back your footage actually goes, so that your real retention matches what you expect and you are not caught out by a drive that fills faster than you assumed.

From a data protection point of view, there is a neat alignment here: shorter, motion-based recording both saves storage and supports the principle of holding only what you need. A system that quietly records everything for months, just in case, is harder to justify than one that captures relevant events and lets routine footage cycle through within a sensible window. Configuring storage and recording sensibly therefore serves both practicality and compliance at once.

Incident footage is different

The retention principle works in your favour when something actually happens. If your cameras capture a burglary, theft, criminal damage or other incident, you have a clear, legitimate reason to keep that specific footage — to report it to the police, support an investigation, or back an insurance claim. In that case you should export the relevant clip promptly, before the loop overwrites it, and keep it for as long as that purpose lasts.

Once the purpose is complete — the investigation closes, the claim is settled — the same principle says you should delete the saved footage rather than keep it indefinitely. Holding onto an old incident clip forever, with no ongoing reason, is the kind of retention the principle discourages. So the pattern is: routine footage overwrites on a short loop, important footage is saved and kept while needed, and saved footage is then deleted when its job is done. That cycle keeps you comfortably within the retention duty.

Retention is one strand of the wider set of duties that apply when home CCTV captures beyond your boundary: justify the capture, minimise it, be transparent, store footage securely, keep it only as long as needed, and respond to subject access requests. Sensible retention supports several of these at once — it limits how much personal data you hold, reduces what you would need to search through if someone requests footage of themselves, and lowers the risk if your storage were ever compromised.

For a homeowner, the practical message is straightforward. Set a reasonable overwrite window rather than the maximum, save anything you genuinely need, delete saved clips once they have served their purpose, and keep your storage secure. If your cameras only ever capture your own property, the household exemption means these duties do not strictly apply — but adopting the same tidy habits is still sensible, and means you are never caught holding more footage than you can account for.

Footage typeSensible retentionWhy
Routine everyday footagedays to a couple of weeks (loop)no ongoing need; minimise holding
Footage of an incidentwhile police/insurer need itlegitimate purpose
Footage requested by policeas the investigation requirescrime detection
Old saved clips, purpose donedeleteno longer necessary

Indicative retention guidance based on the data protection principle of keeping data only as long as needed.

Frequently asked questions

Is there a 30-day limit on keeping CCTV footage?

No. There is no fixed legal limit for domestic CCTV. Where your system captures beyond your boundary and UK GDPR applies, the rule is to keep footage only as long as you genuinely need it. Many home systems happen to retain around two weeks before overwriting, but the principle, not a specific number, is what governs how long you should keep footage.

Should I keep CCTV footage of an incident, and for how long?

Yes — if footage captures a crime or incident, save the clip promptly before it is overwritten, and keep it for as long as the police investigation, court process or insurance claim requires. Once that purpose is complete, delete the saved footage, since there is no longer a legitimate reason to keep it.

Can I keep all my CCTV footage indefinitely just in case?

Keeping everyday footage indefinitely is hard to justify where your system is covered by UK GDPR, because the retention principle says data should be kept no longer than necessary. A sensible overwrite window for routine footage, with important clips saved separately and deleted when no longer needed, is the proportionate approach the ICO's guidance points toward.

Sources & further reading

Figures on this page are typical UK ranges drawn from published sources and depend on your specific property and system. They are guidance, not a quotation.