Surveillance Camera Laws in Victoria: What Businesses Need to Know

Installing CCTV can help deter theft, protect staff and customers, and give you peace of mind. But in Victoria, there are clear rules about when and how you can use surveillance cameras - especially if you’re recording in workplaces or anywhere people expect privacy.

In this guide, we’ll walk through the key laws that apply to Victorian businesses, practical rules for where cameras can go, how to handle audio recording, and what to do with the footage you collect. We’ll also share a simple compliance checklist you can use before you switch the cameras on.

The goal is to help you stay compliant while still getting the benefits of CCTV - so you can focus on running your business with confidence.

Are Surveillance Cameras Legal for Victorian Businesses?

Yes. Businesses in Victoria can generally use surveillance cameras for legitimate purposes like security, loss prevention and safety. However, your setup and day-to-day practices must comply with relevant legislation and privacy expectations.

As a starting point, it’s helpful to understand the national picture and where state rules fit in. For a broad overview of common issues and risks, many businesses review general guidance on security camera laws in Australia and how CCTV laws typically apply across the country.

From there, the specifics for Victoria become important: the state’s Surveillance Devices Act sets strict limits around audio capture and covert surveillance, and other laws affect how you operate cameras in workplaces and customer areas. We break this down below.

What Laws Apply to CCTV in Victoria?

Several laws apply to how you install, use and manage cameras in Victoria. The main ones to know are:

Surveillance Devices Act 1999 (Vic)

• Regulates the use of surveillance devices, including optical surveillance devices (CCTV) and listening devices (audio recording).
• Covert surveillance is tightly restricted. Installing or using devices to record people in places where they reasonably expect privacy (like bathrooms or change rooms) is generally prohibited.
• Audio recording is subject to specific limits (more on this below). As a rule of thumb, avoid capturing audio without clear, informed consent.

Privacy Law (Commonwealth)

• If your business is subject to the Privacy Act 1988 (Cth) (for example, most businesses with $3 million+ turnover or operating in specific sectors), CCTV footage that identifies a person can be “personal information.”
• That means you need a lawful basis to collect it, be transparent about what you’re doing, and secure it properly. Having a clear, accessible Privacy Policy is a key step if the Privacy Act applies to you.

Workplace and Employment Laws

• Employers should be transparent with staff about monitoring. Even though Victoria doesn’t have a dedicated “workplace surveillance” Act (like NSW or the ACT), employees still have rights around privacy, safety and fair treatment.
• Document your approach in a clear Workplace Policy and provide notice before surveillance starts - especially where cameras may observe staff regularly.
• Never place cameras in areas where staff expect a high level of privacy (toilets, change rooms, prayer rooms).

Criminal and Safety Considerations

• Some camera placements or uses can cross into criminal territory - for instance, filming in private spaces or using devices covertly without lawful authority.
• On the safety side, CCTV can support your work health and safety obligations by helping manage incidents, but it does not replace a safe systems-of-work approach.

If you’re comparing state rules or need a refresher on consent and recordings, it’s useful to also consider how Victoria’s rules sit within broader Victoria recording laws.

Can You Record Audio or Conversations?

Audio recording raises different and stricter issues than video-only CCTV. In Victoria, using a “listening device” to record a private conversation is heavily restricted under the Surveillance Devices Act. In practice, this means:

• Do not enable audio on your CCTV unless you have a strong, lawful reason and informed consent from the people being recorded.
• Be especially careful with microphones at service counters, boardrooms, staff rooms, or anywhere people would reasonably expect their conversation is not being recorded.
• If you need to record customer support calls, ensure you provide clear notice and gain consent before recording - and allow people to opt-out or request an alternative channel where feasible.

For detailed guidance on phone and voice recording compliance (including consent best practices), see the overviews on recording a phone call in Australia and business call recording laws. If audio capture is not essential, the simplest and safest path is to disable it entirely.

Employee Monitoring: What Are the Rules?

Monitoring staff through cameras requires a careful, transparent approach. Even without a dedicated Victorian workplace surveillance statute, you should expect that regulators and tribunals will look closely at whether your surveillance is reasonable, proportionate, and clearly communicated.

Give Clear Notice and Set Expectations

• Inform employees about the presence and purpose of cameras before you start recording. Signage in monitored areas is a must for both staff and customers.
• Explain how footage will be used (e.g. security, incident investigation), who can access it, and how long it will be kept.
• Train managers on appropriate use - surveillance should never be used to harass people or for reasons outside what you’ve disclosed.

Use Policies and Contracts

• Document your approach in a surveillance or technology monitoring section within your Workplace Policy.
• Ensure your Employment Contract aligns with your policy and refers to any lawful monitoring of workplace premises or systems.
• Consult with staff or Health and Safety Representatives if monitoring practices change materially - engagement builds trust and reduces risk.

Avoid Prohibited or “High-Risk” Areas

• Never place cameras in bathrooms, change rooms, prayer rooms, or other private spaces.
• Be conservative around break rooms and quiet spaces. If you don’t have a compelling reason to record there, don’t.
• Covert surveillance in the workplace is extremely risky in Victoria - seek advice before you even consider it, and understand that law enforcement warrants are the usual basis for covert monitoring, not routine business operations.

For wider context on how camera use plays out in workplaces, it can be helpful to read up on whether cameras are legal in the workplace and the typical lines that shouldn’t be crossed.

Where Can You Place Cameras - and What Should Signage Say?

Think about placement from a customer and employee perspective. Ask: would a reasonable person expect to be recorded here? If the answer is “no,” it’s probably an inappropriate location.

Smart Placement Principles

• Focus on entrances, exits, point-of-sale, stock rooms, loading docks, and car parks.
• Avoid private spaces and any area where recording would feel intrusive or disproportionate to the risk you’re managing.
• Angle cameras so they capture the area you need without unnecessarily recording surrounding businesses or private property.

Use Clear, Visible Signage

• Post signs at entry points and within monitored areas that state CCTV is in operation.
• Briefly mention why you’re recording (e.g. security and safety) and who to contact with questions. Where the Privacy Act applies, refer people to your Privacy Policy.
• If audio is ever recorded (again, generally best avoided), make this crystal clear and gain consent where required.

If your setup involves more advanced technology such as facial recognition, the legal and ethical risks increase significantly. Read more about the legality of facial recognition technology before deploying it.

Storing Footage: Privacy, Retention and Access Requests

Collecting footage is only half the story. How you store, use and delete it is just as important for compliance and trust.

Minimise What You Keep

• Only record what you need. Avoid audio unless essential and lawful. Don’t point cameras at areas that don’t serve your stated purpose.
• Set reasonable retention periods (for example, 30-60 days unless needed for an incident). Longer retention should be justified by a real business need.

Secure the Footage

• Limit access to trained staff with a legitimate need to view footage.
• Use encryption and strong passwords for systems and cloud storage. Vet third-party providers carefully, including any overseas data storage.

Be Ready for Requests

• Customers and staff may ask about footage that includes them. Where the Privacy Act applies, some requests will be “access requests.” Build a simple process to handle them.
• Have an up-to-date Privacy Policy and ensure your team knows how to respond to questions or complaints. Good transparency goes a long way.

It also helps to think ahead about how long you’ll hold onto data and why. Broader obligations around storage and deletion are discussed in our overview of data retention laws in Australia.

How Does CCTV Interact With Customer Consent and the ACL?

Even though the Australian Consumer Law (ACL) doesn’t directly regulate CCTV, it does shape how you communicate with customers. Clear signage and honest explanations reduce the risk of misleading conduct. If you’re collecting customer images for marketing or testimonials (beyond routine security), think about consent.

• Separate security CCTV from marketing content. If you want to use someone’s image in promotional material, get permission first. Our guide to photography consent laws explains the basics.
• Keep your messages consistent across signage, website FAQs and policies. If you say “no audio,” make sure your hardware settings match.

Practical Compliance Checklist for Victorian Businesses

Before you install or upgrade your system, work through this quick list:

1. Define your purpose: security, safety, incident investigation (avoid “nice to have” recording).
2. Map your locations: avoid private areas; position cameras proportionately for the risk.
3. Disable audio by default unless you have a clearly lawful, consent-based reason.
4. Write it down: include CCTV practices in your Workplace Policy and reference monitoring in your Employment Contract where appropriate.
5. Be transparent: put up clear signage at entry points and within monitored areas; keep your Privacy Policy current and accessible.
6. Secure the system: restrict access, use strong authentication, and vet cloud providers (including any overseas storage).
7. Set retention rules: keep footage only as long as you need; document your deletion process.
8. Train your team: cover when viewing is permitted, how to handle requests, and what to do after incidents.
9. Plan for escalations: know when to contact police, how to preserve evidence, and who can authorise footage release.
10. Review annually: check locations, signage, policy wording and technical settings still match your actual practices.

Key Takeaways

• Using CCTV in Victoria is lawful for legitimate purposes, but you must respect privacy and avoid recording in places where people reasonably expect privacy.
• Audio recording is a high-risk area under the Surveillance Devices Act - disable it unless you have a lawful basis and informed consent.
• Be transparent with staff and customers: use clear signage, keep a current Privacy Policy, and set out expectations in your Workplace Policy.
• Store footage securely, set reasonable retention limits, and be prepared to handle access requests appropriately.
• Avoid covert surveillance in the workplace and never place cameras in bathrooms, change rooms or other private spaces.
• If in doubt - particularly about audio capture or advanced tech like facial recognition - get tailored advice before you proceed.

If you’d like a consultation on CCTV and surveillance camera compliance for your Victorian business, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.