Security cameras and privacy: what you need to know

This guide is for information only and is not legal advice. In Andorra, the reference is Law 29/2021 on personal data protection and the Andorran Data Protection Agency (APDA).

Footage is personal data

If a camera can identify people, the footage is personal data and its processing must comply with data protection rules.

1. Record only what you need

Point cameras at your own entrances and spaces. Avoid recording the street, windows or neighbouring properties beyond the bare minimum. Many cameras offer privacy masks to block out specific areas of the image.

2. Inform people

Put up visible information signs in monitored areas, stating who is responsible and how to exercise data rights.

3. Keep footage for as short a time as possible

Footage should only be kept as long as needed for security purposes and then deleted. We configure the recorder to overwrite automatically.

4. Restricted access

Only authorised people should be able to view footage, with individual user accounts and strong passwords. The camera network should be kept separate from everything else.

5. Staff and guests

In businesses, staff must be informed and areas such as changing rooms or toilets avoided. In holiday accommodation, cameras inside guest spaces are not appropriate.

6. Residential blocks and buildings

Cameras in a building's common areas require the agreement of the owners' association and the same safeguards on information and restricted access.