Office Video Surveillance: How to Install Cameras Legally

Office Video Surveillance: How to Install Cameras Legally

You can install cameras in the office, but not as a tool of total control "just in case". The legal approach for business is as follows: the employer must have a specific, justifiable goal, and the system itself must be necessary, proportionate, transparent for employees and visitors, properly documented, and protected in terms of personal data. The key rules stem from the right to privacy, personal data protection rights, employee labor guarantees, and official clarifications from the Ukrainian Parliament Commissioner for Human Rights. (Legislation of Ukraine)

For an entrepreneur, the main risk lies not in the cameras themselves, but in the wrong model of their use: covert surveillance, excessive number of cameras, audio recording without proper justification, failure to notify employees, free access to the archive, storing records "indefinitely", and the lack of internal rules. A separate written consent of each employee is not a universal and sufficient solution; in labor relations, it is more important to prove a legitimate goal, necessity, and proportionality of processing, and to properly inform the employee before the system starts working. (Legislation of Ukraine)

When Office Video Surveillance is Legal

The right to privacy in Ukraine is protected by the Constitution, the Convention for the Protection of Human Rights and Fundamental Freedoms, and the Civil Code. This means that an employer cannot arbitrarily interfere in the private life of an employee, even if the camera is on company premises. At the same time, open video surveillance in work areas can be lawful when it is truly needed to protect property, ensure people's safety, control access, prevent incidents, record events in high-risk zones, or investigate specific violations, and not for constant psychological pressure on staff. (Legislation of Ukraine)

The legality of the system usually relies on the following conditions:

Is Employee Consent Required

The Civil Code establishes a general rule: a natural person can be video recorded only with their consent, and covert recording without consent is allowed only in cases established by law. But for an employer, this rule is not enough to interpret formally as "got a signature — and everything is legal". The Personal Data Protection Law provides several legal grounds for processing, including not only consent but also, in particular, a legitimate interest if it is not overridden by human rights. The official clarification of the Commissioner explicitly states that it is incorrect for an employer to rely solely on employee consent as the primary basis for video surveillance in labor relations. (Legislation of Ukraine)

For businesses, this means the following: a separate written consent of each employee can be additional evidence of awareness, but it does not replace a legitimate goal, a necessity and proportionality test, internal rules, and the obligation to inform the employee about working conditions. Conversely, the absence of a separate "consent statement" does not automatically make the system illegal if the employer arranged it correctly, justified the need, limited the surveillance zones, and acts transparently. (Legislation of Ukraine)

Where Cameras Cannot Be Installed or Are Highly Risky

It is strictly forbidden to place cameras in areas where a person has an obvious and heightened expectation of privacy:

In office rooms, the risk is higher than in the entrance area, corridor, or open visitor reception zone. The official clarification of the Commissioner specifically points out that a camera in a room where only one employee is constantly present is generally a disproportionate interference unless there is a special justification. Exceptions are possible for high-risk zones — for example, a bank cash desk or a currency exchange point, but not as a general rule for a standard office. (Ombudsman of Ukraine)

Covert Surveillance: Why It's Almost Always a Mistake for Business

The law directly provides for covert recording without the knowledge of individuals for secret investigative and operational-search measures in cases specified by law and by an investigating judge's ruling. The Criminal Procedure Code regulates audio and video monitoring of a place during pre-trial investigations of grave or especially grave crimes, and the Law on Operational-Search Activity regulates corresponding covert measures for authorized bodies. For an ordinary employer, this is not a standard or "similar" tool for organizing office work. (Legislation of Ukraine)

That is why a business should not build a system on hidden cameras. If a company suspects theft or other violations, it is safer to work legally through an open surveillance model, access control, internal investigations, restricting access to valuables, proper property accounting, and, if necessary, contacting law enforcement. Covert filming in the office without a special legal basis creates a high risk of a dispute over privacy and personal data violations. (Legislation of Ukraine)

Audio Recording: Risk Is Much Higher Than with Standard Video

Recording sound is a separate and more sensitive topic. The Constitution and the Civil Code protect the secrecy of correspondence, telephone conversations, and other forms of communication, and the Criminal Code establishes liability for violating the secrecy of telephone conversations and other correspondence. Therefore, for office video surveillance, a safer solution is usually video without sound, unless the business has a very clear, separately documented, and justified scenario where audio recording is truly necessary and does not violate the rights of employees and other persons. (Legislation of Ukraine)

What Documents the Employer Must Prepare

Without documents, even a technically high-quality system will be legally weak. A practical package of documents for the office usually includes:

Signs on the doors alone are not enough. A warning sign is required, but it does not replace internal documents, goal definition, staff awareness, and rules for processing records. (Legislation of Ukraine)

How to Properly Notify Employees and Visitors

The employer must inform the employee about working conditions, internal labor regulations, and other essential conditions before the start of work. In the field of personal data, a person must be informed about the data controller, processing goal, and other basic conditions. For the office, this means not just an order "for the sake of form", but a clear and accessible notification mechanism. (Legislation of Ukraine)

In practice, it is worth making three levels of notification:

Record Access, Storage, and Transfer to Third Parties

A video record is not a "free archive for all managers". Access to it should be granted only to specifically designated employees who truly need it for their position. The Personal Data Protection Law requires ensuring data protection against illegal processing and unauthorized access, and the official recommendations of the Commissioner require recording exactly who works with records and within what limits. (Legislation of Ukraine)

The record storage period must not be "indefinite by default". It needs to be established in internal documents according to the system's goal. One period can be justified for ongoing access control, another — for high-risk zones, and a third — for a separate incident that has already become the subject of an inspection or dispute. It is important that the company can explain why it needs exactly this period. (Legislation of Ukraine)

Transferring records to third parties should only be done in clearly defined cases: for example, to the company's lawyer, law enforcement agencies within their powers, court, or another addressee who has a proper legal basis. The transfer procedure itself, logging of such actions, and the circle of responsible persons are better explicitly written in the internal policy. (Legislation of Ukraine)

Is a License or Special Permit Required

For internal video surveillance in one's own office, general legislation does not establish a separate license specifically "for cameras". Security activity as a type of business activity is subject to licensing. That is, the license issue arises when a business provides security services to other persons as a separate activity, not just sets up a system in its office for its own needs. (Legislation of Ukraine)

How to Account for the Video Surveillance System

For accounting purposes, an acquired video surveillance system is usually accounted for as a fixed asset or as low-value non-current tangible assets — depending on the system's composition, cost, and your accounting policy. The initial cost of such an asset includes not only the purchase price but also delivery, installation, setup costs, and other expenses required to bring the system to a state of readiness for use. (Legislation of Ukraine)

For corporate income taxpayers applying tax differences, tax depreciation goes according to the rules of Article 138 of the Tax Code. For machinery and equipment, the general minimum period in tax accounting is five years, whereas the Code does not establish a separate minimum period for low-value non-current tangible assets. The specific accounting model is better linked to the actual system configuration and the approved company accounting policy. (Legislation of Ukraine)

Liability for Violations

Administrative fines under Article 188-39 of the Code of Ukraine on Administrative Offenses are possible for violating personal data protection rules. The fine amount depends on the violation's nature: specific penalties apply for, among other things, failure to notify or untimely notification of the Commissioner in cases where such notification is required, as well as failure to comply with personal data protection procedures leading to illegal access to them or violation of the data subject's rights. For officials and sole proprietors, sanctions are higher, and for repeated violations — even stricter. (Legislation of Ukraine)

A criminal risk is separately possible. Article 182 of the Criminal Code establishes liability for illegal collection, storage, use, or dissemination of confidential information about a person, and Article 163 — for violating the secrecy of correspondence, telephone conversations, and other correspondence. For business, this means that "amateur actions" with covert recording or unlimited access to sensitive information can go far beyond a labor dispute. (Legislation of Ukraine)

Practical Checklist for the Office

Before launching the system, check that you have fulfilled all basic conditions:

Official Sources

Програма обліку товару для інтернет-магазинів, крамниць, торгових точок, складів та виробництва