CCTV & Security
CCTV and Privacy in Kenya: Signs, Data and Your Responsibilities
Short answer
CCTV footage of identifiable people is personal data. Kenya's Data Protection Act, 2019 sets rules on collecting and handling it, and the Office of the Data Protection Commissioner publishes guidance. As good practice, display clear signs, point cameras at your own property, limit who can view footage, keep it only as long as needed and keep recordings secure. This is general information, not legal advice.
Good practice
- Signs: put visible notices saying CCTV is in operation and who to contact.
- Purpose: use cameras for security, not to monitor private areas like toilets or changing rooms.
- Camera angles: avoid recording neighbours' windows or private spaces.
- Access control: restrict who can view and export footage, and log access.
- Retention: keep footage for a defined period, then overwrite or delete it.
- Security: protect recorders with passwords, locked rooms and updated firmware.
- Sharing: release footage to police or authorities through a proper request.
Businesses
Businesses that process personal data may have registration and policy duties under the Data Protection Act. Check current guidance from the Office of the Data Protection Commissioner or seek advice from a lawyer for your situation.
Workplaces
Tell staff where cameras are and why. Do not use cameras in places where people expect privacy.
Related reading
See viewing CCTV securely and choosing a system.
Common questions
Do I need a sign for CCTV?
It is good practice and commonly expected, so that people know they are being recorded.
How long should I keep footage?
Keep it only as long as needed for your purpose, often 14 to 30 days, unless an incident requires longer retention.
Can I point a camera at the street?
Pointing at public areas can raise privacy issues. Keep the field of view focused on your property and take advice if unsure.