Can my neighbor record me with a CCTV camera?

The household exemption — and where it ends

GDPR Article 2(2)(c) states that the regulation does not apply to processing "by a natural person in the course of a purely personal or household activity". A homeowner with a doorbell camera filming their own porch, garden and driveway is fine — the exemption applies because the activity is purely personal.

The boundary is geographical. The European Court of Justice ruled in C-212/13 (Ryneš v. Úřad pro ochranu osobních údajů, 2014) that as soon as a domestic CCTV system captures public space — pavement, street, neighbor's garden, shared courtyard — the system loses the household exemption and the operator becomes a data controller subject to GDPR in full. The Czech homeowner in that case had a single fixed camera capturing the front of his own house and a small slice of the public footpath. That slice was enough.

In practical 2026 terms: 2.8 mm and 3.6 mm lenses on doorbell and outdoor cameras have horizontal fields of view between 70° and 110°. Mounted at 2.5 m on a typical front porch, that cone almost always reaches into public space and frequently into neighbouring property. Most homeowners are unaware that their camera is technically a GDPR-regulated installation.

If a neighbor's camera is filming your property

The right course of action is escalation in steps. Skip steps and you weaken the case at the next one.

1. Document the camera position. Photograph the housing, the lens, the mounting bracket and — most importantly — the angle. Take photographs from your property looking at the camera and (if safely possible) from the camera's vantage point looking back at yours. Note dates, times, weather. This is your evidence base.
2. Estimate the field of view. Use the lens focal length printed on the camera body (2.8 mm, 3.6 mm, 4 mm are typical) to estimate the HFOV. CCTVplanner's free FOV calculator converts lens + sensor into degrees and a satellite-map footprint at the install distance.
3. Write to your neighbor. A polite written request, citing GDPR Article 6(1)(f) (legitimate interest balancing test) and the Ryneš case, asking for the camera angle to be adjusted so that your property is excluded. Many disputes end here because most homeowners genuinely had no idea their FOV reached over.
4. File with the Data Protection Authority. If the neighbor refuses, file a formal complaint. UODO (Poland), BfDI / state DPA (Germany), ICO (UK), AEPD (Spain), CNIL (France), Garante (Italy). The DPA can compel the controller to reposition or remove the camera and impose fines.
5. Civil action. Privacy intrusions also fall under national civil codes — Article 23 of the Polish Civil Code, BGB §1004 in Germany, etc. A privacy lawyer will pursue an injunction and damages. This is the slowest and most expensive step but it works for repeat offenders.

What your neighbor must do (if filming public space)

Once the household exemption is lost, the camera operator inherits the full GDPR controller role. The duties scale proportionally — a single doorbell camera does not need a Data Protection Officer, but it does need:

• Lawful basis: legitimate interest (Article 6(1)(f)) is the standard fit, but the legitimate-interest balancing test must be documented.
• Retention: the minimum necessary, typically 7–30 days for domestic security. Indefinite retention is not lawful.
• Visible signage: a pictogram and contact information at the perimeter so any visible person knows they are being recorded and how to exercise their rights.
• Subject-access response: anyone who appears in the footage can request a copy of the recording. The controller has one month to respond.
• Minimisation: the camera angle should be the narrowest that achieves the security purpose. Wide-angle cameras pointing at neighbouring properties typically fail this test.
• Audio: capturing audio of public space is treated more strictly than video in most EU jurisdictions and frequently requires explicit consent.

These are not theoretical — DPAs across the EU regularly fine domestic operators between €500 and €5 000 for misconfigured residential CCTV that captures neighbours' property without lawful basis.

Verifying coverage with a free tool

The hardest part of any CCTV privacy complaint is showing the DPA exactly what the camera can see. A photograph of the housing isn't enough; the regulator will want a calculated FOV footprint on a map.

CCTVplanner's free tier supports this directly. Drop a virtual camera at the address (satellite map auto-loads), set the lens focal length and mounting height matching the real camera, and the FOV cone renders on the ground showing exactly which fence lines, footpaths and windows are within the recording area. Print the result as a PDF and attach it to your DPA complaint.

The same tool also supports DORI overlay — the EU 62676-4 framework for image quality at distance. If the neighbour's camera is producing identifiable images of you (face, license plate) at the disputed distance, that triggers the higher tier of GDPR processing.

Frequently asked questions