Straight answer: workplace CCTV is legal in India for security, safety and operational purposes, but washrooms, changing rooms and similar private spaces are off-limits, and employees should be given clear notice — what's recorded, why, who can view it, and for how long. Skip the notice or point a camera somewhere private, and a perfectly legal system becomes a real liability.
An HR manager in a Ludhiana garment unit asked us last month whether they could put a camera inside the staff changing area "just at the door, not facing the lockers." The honest answer was: don't. Not because the intent was bad — it wasn't — but because the question itself was the warning sign. If you're negotiating with yourself about placement, the camera doesn't belong there.
This is the question we get most often from factory owners, retail chains and offices setting up CCTV for the first time: what am I actually allowed to record, and what do I owe the people being recorded?
Where can you legally point a camera at work?
Work areas, generally, without much argument: entrances and exits, production floors, warehouses, cash counters, parking areas, reception. These are places where the business has a clear, defensible reason — security, safety, loss prevention, accountability — and where the people present are there in a working capacity, not a private one.
The test that holds up is simple: would a reasonable employee expect to be observed here while doing their job? A sales floor, yes. A loading bay, yes. A private conversation in a closed HR room, less clearly, and worth thinking through before installing rather than after someone objects.
Where should you never record?
Washrooms and changing rooms. Not partially, not "just near the door." These are private spaces by definition, and recording in them is the single fastest way to turn a security decision into a legal and reputational problem, whatever the stated intent was.
Prayer rooms and rest areas set aside for personal use carry the same logic — the privacy expectation is high and the security justification is usually weak.
Anywhere the purpose can't be stated plainly. If you can't write one honest sentence explaining why a camera needs to be in a given spot, that's a sign it shouldn't be.
What does the DPDP Act actually require here?
India's Digital Personal Data Protection Act treats a person's face captured on camera as personal data, which means the general principles of the law apply: collect it for a stated purpose, tell people it's happening, and don't keep it longer than that purpose needs. This is general guidance, not legal advice — rules and their interpretation can evolve, and a compliance advisor should confirm what applies to your specific setup.
In practice this means three things for a workplace CCTV system:
Notice. Visible signage at entrances, plus a short written note — in the employee handbook or posted near the cameras — covering why cameras are there, what's recorded, who can view the footage, and roughly how long it's kept. This doesn't need to be a legal document; it needs to be honest and visible.
Defined purpose. Say what the cameras are for — security, safety, loss prevention — and stick to it. Quietly repurposing security footage for performance monitoring months later, without having said so upfront, is the kind of purpose creep that turns a defensible system into a grievance.
Limited retention. Keep footage only as long as the stated purpose needs it, then let it age out on a routine schedule. Indefinite retention "just in case" is itself a compliance risk, not a safety margin — the more you keep, the more exposure you carry if the data is ever mishandled or leaked.
What about hidden cameras?
Covert monitoring of employees, without notice, is a much harder position to defend and should be reserved for genuine, specific investigations — not a default mode of operation. If you find yourself wanting to hide a camera from staff as a matter of course, that's usually a sign the placement or the purpose needs rethinking, not the visibility.
Where this gets genuinely hard
Open-plan offices and shared spaces are the grey area nobody has a clean answer for. A camera covering a sales floor inevitably also covers the break corner where people eat lunch and talk privately. There's no perfect fix here — angle cameras to minimise incidental coverage of informal spaces, and accept that some overlap is unavoidable in a shared physical space. We install these systems, so we have a commercial interest in saying yes to more coverage — weigh that against the fact that we're also the ones telling you no on washrooms and changing rooms without exception.
None of this is a substitute for legal advice on your specific site — rules and their application can vary, so a compliance advisor should confirm your setup before you install, not after an employee raises it.