Is CCTV recording of me legal, and can I get a copy of the footage?
Last updated: 2026-07-12 · Educational content; not legal advice.
Short answer
CCTV recording is legal but regulated — footage of an identifiable person is personal data under the Data Privacy Act. NPC Circular No. 2024-02 (CCTV Systems), which replaced the earlier 2020 CCTV advisory, requires operators to post visible notice that CCTV is in use, limit recording to a legitimate purpose, secure the footage, and keep it only for a set retention period. Because you are a data subject in the footage, you can invoke your right of access under RA 10173 §16(c) to request a copy of the parts that show you — the operator may redact or blur other people to protect their privacy, and may refuse where release would defeat a lawful investigation.
Primary sources
Frequently asked
Can a business record me without telling me?
It must give notice — NPC Circular 2024-02 requires a visible sign that CCTV is operating and, on request, information about who runs it and why. Hidden cameras in private spaces (toilets, fitting rooms) are not allowed and can be a serious violation.
How do I request the footage of myself?
Send a written access request to the operator or its Data Protection Officer, identify yourself and the date, time, and location, and cite RA 10173 §16(c). The operator can redact other people and should respond within a reasonable period.
Can they refuse to give it to me?
They may lawfully decline where releasing it would compromise an ongoing law-enforcement investigation, expose others' data that can't be redacted, or where you can't be identified in the frame — but they must explain the basis. Law-enforcement surveillance is outside the CCTV circular entirely.
Take action
Related companies
Related issues
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Contact-list scraping, unauthorized data use, and how to file with the NPC.