If your cameras record people who can be identified, your CCTV footage is personal data under the Data Privacy Act of 2012 (Republic Act No. 10173). Since 27 August 2024, the National Privacy Commission's NPC Circular No. 2024-02 sets binding rules for organizations that use CCTV. These are the points businesses most often miss.
1. Decide the purpose before you install
Write down why each camera is there, for example security of property or the safety of people, and use the footage only for that purpose.
2. Put up clear CCTV notices
Notices must be readily visible and prominently placed, such as at entry points, and explain in plain language that CCTV is in use and why.
3. Keep footage only as long as you need it
There is no fixed number of days in the Circular. Footage should be kept only as long as necessary for its purpose, the retention period must be written in your CCTV policy, and it should not be set just by how much storage the recorder has. Delete footage once it is no longer needed.
4. Be ready when someone asks for footage
People recorded by your cameras have a right to reasonable access to footage of themselves. Have a written process and named staff to handle requests. When someone tells you in writing that they want a copy, preserve that footage, and take it out of the normal deletion cycle until the request is settled.
5. Never record private spaces
Cameras are prohibited in restrooms, toilets, fitting rooms and lactation rooms. If your cameras can zoom or rotate, make sure they cannot look into private spaces such as neighboring homes.
6. Secure the system
Limit who can view and export footage, protect the recorder and the network it sits on, and review the setup regularly. Many organizations also keep audio recording off unless they have a clear need for it.
How LMI helps
OneWatch deployments are designed with signage, retention limits and access controls in mind, and LMI has delivered CCTV from single warehouses to an 82-camera distillery and city-wide systems. Read our CCTV case study.
This article is general guidance, not legal advice. Read the full Circular on the National Privacy Commission website and check your setup with your Data Protection Officer.
Not sure which way to go? Book a free site survey or email lori@onelmi.com. If a smaller solution is enough, we will say so.