Doberman

Requesting CCTV footage someone else holdsyour rights, the deadline, and the trap in the timing

You appear in footage a shop, a pub or a neighbour is holding, and you want a copy. The right is real and the deadline is short. Here is how to ask so the footage still exists when they answer.

The quick answer

If you appear in the footage you have a legal right to a copy of it, under Article 15 of the UK GDPR. The holder has one calendar month and normally cannot charge you. The problem is timing: most footage is deleted after about 30 days, and preserving it while they think about your request is only good practice, not a duty. So the first line of your request should not be the request. It should be please preserve the footage from this date and time.

What this guide covers

  • How far back you can realistically go, and why the clock is the whole problem.
  • Exactly what to put in a request so it cannot be stalled for clarification.
  • What changed in 2025, which most advice on this subject has not caught up with.
  • Asking a business versus asking a neighbour, and why the gap is enforcement.
  • What to do about footage you do not appear in, including the car damage case.
  • Why court-ordered disclosure almost never works for the people who want it.

Who holds it, and what that means for you

The right is the same whoever the holder is. What changes is how much good it does you.

A shop, pub or car park

What you can demand
Article 15, one calendar month, normally free
What actually happens
Best odds. They have to keep a process and supply a usable video format

A neighbour with domestic CCTV

What you can demand
Same right, but only if the camera sees past their boundary
What actually happens
ICO is highly unlikely to enforce against a householder. Ask, do not threaten

The police, for footage they hold

What you can demand
Access under the Data Protection Act 2018, one calendar month
What actually happens
Can be withheld to protect an investigation, and edited to remove other people

Anyone, for footage you are not in

What you can demand
Subject access does not reach it
What actually happens
Report it and let the police request it. Court disclosure rarely works, see below

By the Doberman install team

CCTV system designers & installers, Leicester

Last reviewed September 2026

How far back can you actually go

Nobody is obliged to keep it for any length of time. UK law sets no minimum and no maximum for surveillance footage, so what a holder has is whatever their own purpose and their own hard drive left them with. We cover why that is, and what sets the number on a given system, in our guide to how long CCTV footage lasts.

For planning purposes, assume a month at the outside for a business and considerably less for a house. A supermarket or a council car park is sized to hold roughly that. A domestic recorder pushing several high-resolution cameras can be down to a week, because every extra camera and every extra pixel eats the same drive.

So do not spend a fortnight deciding whether to ask. Treat it as days.

The timing trap nobody warns you about

Line these three facts up and the problem is obvious, but almost no guide puts them next to each other.

  • Footage is typically deleted around 30 days after recording.
  • The holder has one calendar month to respond to your request.
  • Preventing deletion of footage caught by a request is described by the ICO as good practice, not as a duty.

A holder who takes their full month, in good faith, can hand you a polite letter explaining that the footage no longer exists. Nobody has broken any rules. The ICO does tell organisations that information may be routinely deleted if they take the full month, and that in those circumstances it is good practice to prevent premature deletion. Good practice is not a lever you can pull.

The fix is free and takes one sentence. Open with a preservation request, before you get into your rights: ask them to preserve the footage from the specific date, time and camera while they deal with your request. Most staff will do it if asked plainly and early. Very few will think of it on your behalf.

Would your own system stand up to this?

Doberman sizes retention to what you would actually need to look back on, rather than to whatever the drive happened to come with.

What to put in the request

A request can be verbal, but make it written so there is a date on it. You do not have to call it a subject access request or cite anything. You do need to give them enough to find you.

  • The preservation ask, first, as above.
  • The date and as precise a time window as you can manage.
  • The location, and which camera or entrance if you know it.
  • Something that identifies you in the footage: what you were wearing, which direction you came from, or a photo of yourself.
  • How you would like to receive it, and your contact details.

That last group matters more since 2025 than it used to. The Data (Use and Access) Act 2025 lets a holder pause the one-month clock while they ask you to clarify a request, and it confirms that they only have to carry out reasonable and proportionate searches. A vague request now has a defined way of stalling. A precise one does not give them the opening.

If the camera belongs to a business and you do not know who to write to, the owner's details are usually on the sign attached to the camera. That signage is itself a legal requirement where the camera films beyond a private boundary.

What they have to give you, and what they can hold back

You are entitled to your own personal data, which means the footage you appear in. You are not entitled to everything the camera saw that day, and you are not entitled to information about other people.

That does not let them fob you off with a summary. The ICO expects footage to be provided in a commonly used video file format, and says a transcript, or in some circumstances even a still photograph, is unlikely to communicate all of the contextual information in the footage that could count as your personal data. A viewing on their premises can replace a copy only if you agree to that.

Other people in the shot get dealt with rather than used as an excuse. The ICO points to blurring, masking or a solid fill to obscure them. If the system cannot do any of that, the obligation does not vanish: the holder should disclose only with the other people's consent, or where it is reasonable to do so without it.

There is one refusal ground you are likely to meet and it is legitimate. GOV.UK puts it directly: they can refuse your request if sharing the footage could put an ongoing criminal investigation at risk. A holder can also refuse, or charge a reasonable fee, where a request is manifestly unfounded or excessive, but they have to be able to demonstrate that, and the ICO sets a high threshold for it.

Asking a neighbour is not like asking a shop

On paper the right is identical. In practice the two situations behave nothing alike, and it is worth knowing which one you are in before you decide how to approach it.

Domestic CCTV only engages data protection law once it captures something beyond the owner's own property: a neighbour's garden, a pavement, a communal area. A camera pointed purely at their own back garden is outside it. Where it does apply, the neighbour owes you the same one-month response as a business would.

The gap is enforcement. The ICO has said plainly that there is a limited amount of action it can take against an individual, and that it is highly unlikely to consider it fair or balanced to take enforcement action against a home CCTV owner. Quoting legislation at someone over a fence, then, buys you very little. Asking them decently buys you most of what is available.

A business is the opposite. It pays a data protection fee, has to log requests and how they were handled within statutory timescales, has to be able to locate footage by date, time and location, and has to be able to hand it over in a usable format. There is a process to appeal to, and a regulator with appetite to look at it.

If informal contact with a neighbour fails, the established ladder is their landlord where they rent, then mediation, then the police if there is harassment, then court as a last resort. Cameras have been found to breach data protection law in a domestic dispute before, in a 2021 county court case, but that was an unusually contested situation and a county court decision does not bind anyone else.

Footage you are not actually in

This is the situation most people are really in. Someone has reversed into your car in a supermarket car park, or put a brick through a window while you were out. You want the footage, and you are not in it.

Subject access is a right to your own personal data, so it does not straightforwardly reach a clip that shows only a vehicle and no identifiable person. But it is not the flat no that gets repeated online either. The test is whether the information relates to you as an identifiable living person, and context influences that. An identifiable vehicle, in a context that is about you, is at least arguable. We could not find a source that settles the car-alone case, and we are not going to pretend one exists. Ask on that basis, politely, and see.

The route that works is the police. Police guidance treats the existence of CCTV as a reasonable line of enquiry that investigators would usually review, and advises telling them about any camera you know of at the scene when you report the incident. A request from an officer carries weight a letter from you does not, and a holder is entitled to keep footage longer than usual when a law enforcement agency asks them to preserve it for an active investigation.

Why a court order is usually not the answer

Plenty of advice ends by telling you to apply for pre-action disclosure under Civil Procedure Rule 31.16, or for disclosure against a non-party under rule 31.17. Both rules are real. Both are usually unavailable to the person reading about them, for a reason that is stated in the first line of the Part and almost never mentioned.

Rule 31.1 says: this Part applies to all claims except a claim on the small claims track. A damaged car, a broken window, a disputed parking charge, these are small claims track values. The disclosure machinery in Part 31 simply does not apply to them.

So if someone has told you to get a court order for the CCTV of your bumper, that advice is almost certainly wrong on its own terms. Where the sums are large enough to leave the small claims track, the rules do come into play, and the courts have the underlying power to order disclosure by a non-party under the Senior Courts Act 1981 and the County Courts Act 1984. There is also Norwich Pharmacal relief, an order compelling a third party caught up in wrongdoing to reveal who the wrongdoer was. All of that is proper litigation with proper cost.

For an everyday incident, the honest hierarchy is: ask nicely and immediately, ask for preservation first, report it to the police and tell them where the cameras are, and treat court as something that exists rather than something you are going to do.

If they ignore you

Complain to the holder first, in writing. Since the Data (Use and Access) Act 2025, organisations have to acknowledge a complaint within 30 days and tell you the outcome without undue delay, and have to provide an electronic route for making one.

After that, the ICO. Section 165 of the Data Protection Act 2018 requires it to consider and respond to complaints about infringements of data protection rights, investigate to the extent it thinks appropriate, and tell you the outcome. Two things to expect: the ICO focuses on cases where there is clear and serious harm, and it cannot award you compensation even if it concludes the law was broken. Compensation is a court matter, separately.

One timing caveat on everything in this section. The ICO's CCTV and subject access guidance currently carries a notice saying it is under review following the Data (Use and Access) Act 2025, so check the ICO directly if a lot turns on the detail.

About this guide

Who wrote this

Written by Doberman, a CCTV system designer and installer working with homes and small businesses across Leicester and Leicestershire. We are on the other side of this transaction most of the time, specifying the systems people end up making requests to, which is why the retention and format detail here is specific rather than general.

How this guide was produced

The legal points come from primary sources, checked directly: GOV.UK for the 30-day and one-month figures, the Data (Use and Access) Act 2025 and the ICO's summary of what it changed for stopping the clock and the complaints duty, ICO guidance for the right of access and video surveillance, and Civil Procedure Rules Part 31 for the disclosure rules and the small claims exclusion.

What we have deliberately not said

We have not told you that you definitely cannot get footage of your car, because no source we found settles it. We have not put odds, costs or timescales on a court application. And we have not suggested a neighbour can be made to comply, because the regulator has said the opposite.

Disclosure

We install CCTV for a living, so treat anything we say about professional systems as coming from an interested party. Nothing on this page is a service we sell, though. It is written for people asking somebody else for footage, and it exists because the question comes up constantly and a great deal of the advice about it predates the 2025 changes.

Common questions

How far back can you get CCTV footage?

Usually about 30 days from a business, and often a good deal less from a house. There is no legal minimum or maximum in the UK, so retention is whatever the holder chose and whatever their drive allows. Thirty days is the working figure GOV.UK quotes for CCTV generally, but a home recorder running several high-resolution cameras can be down to a week. Assume days rather than weeks and ask immediately.

Can I request CCTV footage of myself?

Yes. Article 15 of the UK GDPR gives you the right to a copy of your own personal data, and footage you appear in counts. The holder normally has one calendar month to respond, and normally cannot charge you. They can extend by two further months if the request is complex or you have made several, and since the Data (Use and Access) Act 2025 they can also pause the clock while they ask you to clarify what you want.

Can I ask to see CCTV footage from a pub or a shop?

Yes, and a business is the easiest holder to deal with, because organisations have to log requests, be able to find footage by date, time and location, and supply it in a commonly used video format. Ask the manager who handles data protection requests. Put the date, the time and a description of yourself in writing, and ask them to preserve the footage while they consider it.

Can I ask my neighbour for their CCTV footage?

You can, and if their camera films beyond their own boundary then data protection law applies to them and the same one-month right applies. Enforcing it is a different matter. The ICO has said it is highly unlikely to consider it fair or balanced to take enforcement action against a home CCTV owner, so in practice asking politely gets you far more than quoting legislation at them.

Can I get footage of my car being damaged if I am not in the shot?

This is genuinely unsettled and anyone who tells you otherwise is guessing. Subject access covers your own personal data, so footage showing only a car and no identifiable person is arguably outside it, but the test is whether the information relates to you, and context matters. It is worth asking on that basis. If the holder says no, the realistic route is the police rather than the courts, for the reason set out in the section on court orders.

What happens if they ignore me?

For a business, complain to the ICO, which has a statutory duty under section 165 of the Data Protection Act 2018 to consider complaints. Be aware the ICO cannot award compensation. Since the 2025 Act, organisations also have to acknowledge complaints made to them within 30 days. For a neighbour, the practical ladder is talking to them, their landlord if they rent, mediation, the police if there is harassment, and court only as a last resort.

Want your own footage to be there when you need it?

We visit, map the blind spots, and quote one fixed price on the spot.