Sapna has completed a Bachelor of Arts/Laws. Since graduating, she's worked primarily in the field of legal research and writing, and she now writes for Sprintlaw.
Contents
Workplace cameras can be a helpful way to protect your staff, customers, stock, equipment and premises. They can also help you investigate incidents quickly, resolve disputes, and meet certain safety expectations (especially where you’re dealing with the public, cash handling, or high-value inventory).
But cameras and surveillance can just as easily create risk if they’re set up without a clear purpose, without the right notices, or in places where people reasonably expect privacy.
In Australia, it’s often possible to use workplace cameras and surveillance legally - but the legal “yes” is usually conditional. What’s lawful depends on where your business operates, what you record (video, audio, computer activity, GPS, etc), how you notify people, and how you collect, store and use the footage.
Below, we’ll walk you through the main legal issues to think about in 2026, plus a practical checklist you can use to set up (or audit) workplace cameras and surveillance the right way.
Why Do Businesses Use Workplace Cameras And Surveillance?
Most small businesses don’t install cameras because they want to “watch” their team - they install cameras because they want to manage real risks.
Common lawful reasons include:
- Site security (break-ins, theft, vandalism, after-hours access)
- Work health and safety (WHS) incident response and hazard monitoring
- Preventing or investigating misconduct (for example, stock shrinkage or cash discrepancies)
- Protecting customers and managing aggressive behaviour in public-facing workplaces
- Evidence gathering where there’s a dispute, incident, or insurance claim
The legal theme is this: cameras and surveillance are easier to justify when they are proportionate to a legitimate business purpose and you’re transparent about them.
Problems tend to arise when surveillance is introduced as a “gotcha”, used to micromanage performance, or installed in private areas (even if you think you have a good reason).
What Laws Apply To Workplace Cameras And Surveillance In Australia?
There isn’t one single “workplace camera law” that applies everywhere. Instead, your obligations come from a mix of state/territory surveillance rules, privacy obligations, and employment law principles.
At a high level, the legal questions are usually:
- Are you allowed to record? (video, audio, computer monitoring, GPS tracking)
- Did you notify people properly? (signage, policies, employment terms, consultation)
- Are you recording in a place where privacy is expected? (toilets, change rooms, break rooms, medical areas)
- Are you handling the footage appropriately? (storage, access, retention, disclosure)
If you’re unsure whether cameras are permitted in your particular workplace setup, start with these resources:
1) State And Territory Surveillance Laws (Especially Audio Recording)
Surveillance legislation differs across Australia, and the “audio” side of surveillance (recording conversations) can be more sensitive than video.
For example, if your camera system records sound, that can trigger additional rules around consent and notification. If you operate in Queensland or New South Wales, it’s worth being especially careful about how and when conversations can be recorded:
Even if your intent is security, audio recording can quickly become a legal and trust issue if it captures private staff conversations, customer disputes, or sensitive discussions.
2) Privacy And Data Handling (Footage Is Often Personal Information)
Video footage can be “personal information” if it identifies someone (or makes them reasonably identifiable). If your business is covered by the Privacy Act 1988 (Cth) (or you handle personal information in a way that brings privacy expectations into play), you’ll want to think about:
- what you collect and why
- how you notify people
- how you store it securely
- who can access it
- when you delete it
Even where the Privacy Act doesn’t strictly apply (for example, some smaller businesses), good privacy practice still matters - it reduces risk, builds trust with your team, and helps avoid disputes about misuse of footage.
It’s common for businesses with CCTV to also keep a tailored Privacy Policy that explains how footage and other personal information is collected and handled.
3) Employment Law And Workplace Relations
Surveillance can affect the employment relationship. If you use cameras to monitor staff performance, investigate misconduct, or discipline an employee, you’ll want to ensure your approach is consistent, fair, and aligned with any workplace policies or employment terms.
This is where having clear contracts and expectations can help - especially if surveillance is part of how you manage safety and security in the workplace. Many businesses document expectations about monitoring and workplace conduct in an Employment Contract and supporting policies.
When Are Workplace Cameras Usually Lawful?
While every workplace is different, CCTV is more likely to be lawful when the following are true:
- You have a clear and legitimate purpose (security, safety, incident investigation, compliance)
- You use the least intrusive option that still meets your purpose (for example, cameras covering entry points rather than constant close-up monitoring of desks)
- You notify employees and visitors through signage and workplace documents
- You avoid private areas where people expect privacy
- You secure and limit access to footage and set a sensible retention period
Video-Only CCTV Is Usually Lower Risk Than Audio Recording
If your system records video only (no sound), it’s often easier to justify and manage. Audio recording can carry extra legal restrictions, and it may also capture more sensitive information than you intend.
If your provider’s system has audio recording “on by default”, that’s a good reason to pause and check your settings.
Overt Cameras With Clear Signage Are Usually Safer Than Hidden Cameras
Overt CCTV is generally easier to defend because you’re being transparent. Hidden cameras are much more likely to trigger legal issues and employee trust concerns.
There can be exceptional situations where covert surveillance is considered (for example, suspected serious misconduct), but this is the kind of scenario where getting advice first is strongly recommended - because the facts and the jurisdiction matter.
Security-Focused Cameras In Public-Facing Areas Are Usually Easier To Justify
Some camera placements are common and generally accepted, such as:
- entry/exit points
- customer service counters
- cash registers and safes
- stock rooms (with proper notice)
- car parks and loading bays
Even then, you should still think about what the camera captures in the background (for example, a camera near a counter might inadvertently capture staff break areas or private documents).
Where Can Workplace Cameras Become Illegal Or High Risk?
Some situations tend to create trouble quickly - either because the law is stricter, or because it’s harder to justify the intrusion.
1) Cameras In Bathrooms, Change Rooms, Or Other Private Areas
As a general rule, recording in areas where people have a strong expectation of privacy is a major red flag. This includes toilets, change rooms, shower areas, and sometimes dedicated medical or counselling spaces.
Even if you’re trying to stop theft, placing cameras in these areas can expose you to serious legal consequences and reputational damage. If theft is happening in or near private areas, it’s usually better to look at alternative controls (better access control, inventory systems, supervision practices, or cameras covering entry/exit points outside those areas).
2) Audio Recording Without Appropriate Consent Or Notification
Audio recording is one of the most common “accidental non-compliance” problems, because many camera systems are installed as a bundle and businesses don’t realise sound is being captured.
If your cameras record audio, you’ll want to confirm what rules apply in your state/territory and make sure your notices and policies are appropriately drafted.
3) Surveillance Used As A Substitute For Proper Performance Management
There’s a difference between:
- security and safety monitoring, and
- constant performance surveillance (for example, tracking every movement, timing bathroom breaks, or monitoring conversations to “catch mistakes”).
Even if some monitoring is lawful, using it in a heavy-handed way can damage trust, increase complaints, and complicate disciplinary processes.
If footage may be used in performance or conduct processes, it’s best practice to be clear upfront about how surveillance information can be used.
4) Poor Footage Handling (Sharing, Leaking, Or Misusing CCTV)
A lot of legal and reputational risk comes from what happens after you record footage.
Common mistakes include:
- sharing footage in staff group chats
- showing footage to other employees “out of curiosity”
- using footage for a different purpose than originally stated
- keeping footage indefinitely without a retention plan
- not restricting admin access to the CCTV system
If CCTV is stored in the cloud, also consider where the provider hosts data and what security controls are in place.
How Do You Set Up Workplace Cameras And Surveillance The Right Way? (Practical Checklist)
If you’re about to install cameras (or you already have them and want to reduce risk), this checklist will help you build a practical compliance foundation.
1) Define Your Purpose (And Write It Down)
Start by clearly documenting:
- why you are installing cameras (security, safety, incident investigation)
- which areas will be monitored and why
- whether audio will be recorded (and if so, why)
- who can access footage and in what circumstances
This is useful for internal alignment, but it also helps if your surveillance is ever questioned later (by staff, customers, regulators, or a court).
2) Choose Placement Carefully
As a rule of thumb, try to:
- focus on entrances/exits, high-risk areas, and public-facing zones
- avoid filming into private spaces (including through reflections, glass, or open doors)
- avoid capturing sensitive information in the background (passwords, client files, health info)
If you’re unsure whether a location is “private”, treat it as high risk and get advice before installing.
3) Decide Whether You Truly Need Audio
In many workplaces, video is enough. Audio recording often increases legal complexity without adding much value.
If you do need audio (for example, a high-risk customer environment), confirm:
- what state/territory rules apply
- what consent/notice steps are required
- how audio will be stored and used
4) Notify People Clearly (Signage + Policies + Contracts)
Good notification is both a legal safeguard and a trust-building measure.
In practice, this might include:
- signage at entrances and monitored areas (clear, visible, and easy to understand)
- workplace policies explaining what surveillance is used for
- employment documentation so employees understand monitoring expectations from the start
For many businesses, surveillance fits naturally within broader workplace rules about privacy, conduct, and the use of company systems. Depending on your setup, you may also need policies for device use and communications, such as a mobile phone policy, especially where phones and recordings create additional privacy risk.
5) Control Access, Retention, And Security
Ask yourself:
- Who has admin access to the CCTV system?
- Do you have individual logins (rather than shared passwords)?
- How long is footage kept for?
- When and how do you delete footage?
- What happens if police, an insurer, or a customer requests footage?
A sensible retention period depends on your purpose (and sometimes your insurer’s requirements), but “keep everything forever” is rarely a good idea.
6) Be Careful When Using Footage In Investigations
Using CCTV to investigate an incident is common. The higher-risk part is how you handle fairness and process.
As a practical guide:
- limit review of footage to decision-makers who need to see it
- avoid “trial by CCTV” (where assumptions are made without context)
- keep notes of why footage was reviewed and what it shows
- avoid sharing footage more broadly than necessary
If the investigation could lead to disciplinary action, it’s worth making sure your process is consistent with fair workplace practices and your existing employment documents.
7) Review Your Approach Regularly
Surveillance compliance isn’t a “set and forget” task. Review your setup when:
- you expand to a new site
- you change camera placement
- you change CCTV providers or storage methods
- you start recording audio
- you introduce other monitoring tools (GPS tracking, computer monitoring, keystroke logging, etc.)
This is also a good time to check whether your notices, contracts and privacy documentation still reflect what you’re actually doing in the workplace.
Key Takeaways
- Workplace cameras are often legal in Australia, but the details matter - especially your purpose, notice, placement, and footage handling.
- Audio recording is usually higher risk than video-only CCTV, and state/territory rules can apply differently depending on where you operate.
- Cameras should generally be avoided in places where employees and visitors reasonably expect privacy (like bathrooms and change rooms).
- Clear signage, practical workplace policies, and well-drafted employment documents help set expectations and reduce disputes.
- How you store, restrict access to, and share footage is just as important as how you record it.
- If you plan to use surveillance for investigations or performance issues, it’s worth getting advice early so your process stays fair and defensible.
If you’d like help setting up workplace cameras and surveillance compliantly (or reviewing your existing setup), you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.