Staying Legal with Spy Cameras

Government: Surveillance Under the Law

When governments use spy cameras, they operate under strict oversight, at least on paper.

Across the EU, the European Data Protection Supervisor (EDPS) insists that state bodies only use surveillance when it's proportionate and necessary. That means cameras can't just run endlessly "in case something happens." Each installation must have a defined purpose, like preventing terrorism or monitoring a specific crime hotspot.

A major legal development is the 2024 EU Artificial Intelligence Act. It labels biometric surveillance, such as facial recognition, as "high-risk," so intelligence agencies and police forces can't casually deploy these tools. They need special authorisation and must demonstrate robust safeguards.

Different countries add their own twists. Germany, for instance, requires judicial approval for most covert recordings. Courts there have repeatedly ruled that hidden cameras in public or workplaces must be a last resort. France sets a one-month limit on how long surveillance footage can be kept unless it's tied to an investigation.

Governments may seem powerful, but they're reined in by transparency and oversight. If a state agency abuses its powers, courts in Luxembourg or Strasbourg are ready to step in.

Private Investigators: Boundaries and Limits

Licensed private investigators walk a fine line. They're hired to collect evidence, but they can't violate privacy laws just to make a client happy.

European courts have made this clear. In the 2019 case Lopez Ribalda v. Spain, the European Court of Human Rights held that hidden workplace cameras could be used to detect theft, but only when the employer had serious grounds for suspicion and no other way to confirm it. Blanket surveillance was ruled a breach of workers' rights.

The takeaway for private investigators is that covert devices must be used sparingly and only when proportional to the suspected offence. Recording audio is even more restricted than recording video. In countries like Germany, secretly recording a conversation without consent can be a criminal offence, regardless of who you are.

Many investigators rely on small, discreet devices. Cameras built into clocks, pens, or car key fobs. These tools are legal to own, but using them requires following national laws to the letter. A private investigator who oversteps their bounds could lose their license and have evidence thrown out of court.

Everyday Consumers: The Household Exception

For most people, spy cameras are about safety, not espionage. Parents want to check on babysitters. Homeowners worry about property damage and want to deter burglars.

The GDPR makes room for this. Under the "household exemption," recordings made purely for personal or household use don't trigger data protection rules. That means you can place a covert camera in your living room or a hidden clock camera in your garage.

But there are limits. If your device captures the street outside or a shared hallway in an apartment block, the exemption no longer applies. Suddenly, you're processing other people's personal data without consent, which can bring fines.

The Irish Data Protection Commission has also published specific Guidance on the use of Domestic CCTV (2021), advising homeowners to position cameras so they capture only their own property and not public spaces or neighbouring homes. They also warned that posting footage online — even to shame vandals — is a breach of data protection law.

Nanny Cams: A Grey Zone

Nanny cams are common, but the household exemption only stretches so far. If your setup captures a caregiver who hasn't been told, the exemption can fall away — turning a private recording into unlawful monitoring in some countries.

Secretly filming a nanny without their consent can cross into unlawful territory in countries like Germany and France, where regulators view covert monitoring of employees as a breach of privacy. In the UK, nanny cams are legal, but parents are encouraged to inform caregivers in advance.

Across Europe, the guiding principle is transparency: if a nanny cam is used, it should be disclosed, proportionate, and confined to your household.

Short-Term Rentals: A Special Case

Few areas of surveillance law spark as much debate as short-term rentals. Hosts want to protect their property, while guests expect privacy. Under the GDPR and national data protection laws, the balance leans heavily toward guest rights.

The general rule is that any room where guests would have a reasonable expectation of privacy is off-limits to hidden cameras. That includes bedrooms and bathrooms. Even visible cameras indoors are highly restricted in many EU countries, as regulators consider them invasive unless guests have given explicit, informed consent.

What's typically allowed is external monitoring. For example, a host can install a visible camera pointed at the entrance or driveway to document who enters and exits. The Spanish data authority (AEPD) and France's CNIL have both clarified that cameras must be aimed only at the host's property, never at shared hallways or public areas. Anything beyond that risks violating data protection law.

Platforms like Airbnb also enforce their own stricter rules: hidden cameras inside listings are forbidden, and any external cameras must be disclosed in the listing description. Undisclosed cameras can get a host banned, even if the device itself would be legal under local law.

For hosts who still want peace of mind without crossing lines, options include:

• Visible doorbell cameras or entryway devices (within property boundaries).
• Motion detectors or noise sensors that track activity but don't record images or conversations.
• Tamper-proof locks and smart entry systems that track access but don't record video.

In short, surveillance in rentals should be kept to a minimum, and renters should be informed of its presence. Hidden devices may protect property in the short term, but they create enormous legal risk and can destroy trust with guests and platforms alike.