Where you can legally point a home security camera in Ireland

One rule decides it, and the Data Protection Commission publishes it in plain terms: a home camera is only outside data protection law for as long as it sees nothing but your own property. This page reports what the DPC says, and cites it throughout.

What this page is

A report of the regulator’s published guidance, with links to it. It is not legal advice, and we cannot take up an individual dispute with a neighbour, a camera owner or the DPC on your behalf. Where you need your own situation assessed, that is a question for a solicitor or for the DPC itself.

The one rule that decides everything: the household exemption

The GDPR does not apply to personal data processed by a person in the course of a purely personal or household activity. The DPC calls this the household, or domestic, exemption, and points to Article 2 of the GDPR for it.

Applied to cameras, the DPC’s guide states the test in one sentence:

“A domestic CCTV system should only operate to capture images within the perimeter of the CCTV operator’s own property, including their garden and/or driveway. Systems which operate in this way are considered to fall within the household exemption and, as such, they are not subject to data protection law.”

A video doorbell is not a special case. The guide says so directly: “All references to CCTV systems within this guide should be understood to include both fixed cameras and smart doorbells in a domestic setting.”

Inside the exemption

Your house, your garden, your driveway — used for your own purposes.

Outside it

The public footpath, the road, a back alley, a shared common area, and a neighbour’s home, garden or driveway.

When your camera stops being “domestic”

The DPC’s guide:

“However, if you have installed a domestic CCTV system which captures images and/or sounds beyond the perimeter of your property, for example, images and/or sounds of other people in their homes, gardens, on public footpaths or streets, the household exemption will not apply and you will be bound to comply with all data protection obligations under the GDPR.”

Two details in that sentence are easy to miss. It covers sound as well as images, so a doorbell’s microphone range matters as much as its lens. And the exemption does not partly fail: once the system captures beyond your perimeter, the obligations attach to you as the operator.

The DPC grounds this in a Court of Justice of the European Union judgment, Case C-212/13, decided on 11 December 2014. In the DPC’s summary, the Court determined that “the personal or household exemption from data protection law does not apply where a domestic CCTV system captures images outside the perimeter of the system operator’s private property”.

On neighbours the guide is blunt: “It is not acceptable to operate a CCTV system in a manner that captures images of your neighbours in their homes, gardens or driveways. Any actions taken to focus your CCTV cameras into those private spaces is a violation of your neighbours’ data protection rights.”

The four questions readers actually ask

Does a video doorbell make me a data controller?

Not on its own. “A smart doorbell is likely to fall within the domestic exemption provided that it only records the private area within the perimeter of your home.” The DPC also draws a line at continuous recording: citing Ryneš, it says a domestic system which continuously records any public space beyond your perimeter falls within the scope of the GDPR. Where a doorbell is not recording continuously, the exemption is “likely to apply” — but the DPC still asks homeowners to “take care to ensure that the smart doorbell does not intrude on areas belonging to anyone other than the homeowner”.

Can I watch my car parked on the road outside?

The DPC answers this one with a flat no: “You cannot avail of the household exemption to continually monitor, by domestic CCTV device, the public roads and footpaths outside your property for the purposes of preventing the theft or damage to parked vehicles.” Cameras covering public space, it adds, sit inside data protection law and operators “will need to make themselves aware of their obligations under this legal regime”.

What if nobody in the footage is recognisable?

Then it may not be personal data at all. Personal data covers information where people are identified or identifiable; the DPC notes that if a doorbell “captures images of persons who cannot be identified or identifiable (due to the poor quality of the recording, for example), these images will not constitute personal data for the purposes of the GDPR”. Its worked example is a doorbell that shows the caller clearly while people on the street behind are obscured or too low-quality to identify.

What about a dummy camera?

Nothing is being recorded, so nothing is being processed. The DPC: “The use of dummy cameras or deactivated cameras do not give rise to data protection issues.”

What you must do if your camera sees past your boundary

The DPC gives two routes, and you pick one. Change what the camera captures, or carry the obligations of a data controller under the GDPR.

For the first, the guide names two concrete fixes — the same two it illustrates with before-and-after diagrams. Use the device’s privacy zone feature to black out public areas, or adjust the angle so the public area falls outside the frame.

The second route is heavier than it sounds. Where a system records people in shared or public spaces, the DPC says “it is unlikely that your purposes for operating your CCTV system will outweigh the data protection rights of those people who may have their day-to-day activities recorded by your CCTV system”. In other words, becoming a controller is not a way of keeping the camera where it is.

What you do with the footage matters too

Posting a clip online is its own decision, and it changes your position. “As a general rule the DPC advises individuals not to publish such footage online or disseminate it via other means, as they are unlikely to have a lawful basis under the GDPR to do so.” If you post it, the DPC says you will be considered a data controller and bound by the duties that come with that, including providing a lawful basis under Article 6(1).

Giving footage to the Gardaí is treated differently and is expressly permitted: “The sharing of CCTV footage with An Garda Síochána in order to assist in the prevention, investigation or prosecution of criminal offences is permitted under section 41(b) of the Data Protection Act 2018.” Where you have an image of someone you believe has committed or may commit a crime, the DPC suggests contacting An Garda Síochána, “as they are best placed to determine what further action is required”.

Your neighbour’s camera points at your house

The DPC’s first step is not a complaint to the DPC. Its guide: “In most cases, we suggest that you start by contacting the CCTV owner to explain your concerns.” Its case studies put the same point more firmly, saying the DPC “encourages individuals with concerns about a neighbours CCTV system to engage directly with the neighbour themselves in the first instance, so that a satisfactory resolution can be achieved”.

Five things the DPC suggests raising:

•The CCTV owner may not be aware that you were concerned about being recorded.
•Ask them why they are using CCTV. People usually install it to monitor and protect their own property, and understanding why may put your mind at ease.
•Ask whether they use filters or privacy blockers, which can blur out public spaces and other people’s property.
•Ask to see what they are recording. The footage may not be as intrusive as you think.
•They may have installed dummy or deactivated cameras as a deterrent. In that case no personal data is being processed at all.

If you think someone is recording your children

The DPC’s answer keeps the same first step, and names a different second one: “In most cases, we suggest that you start by talking to the CCTV owner. If you feel the person is recording your child inappropriately, then you should contact An Garda Síochána.”

What the DPC can and cannot do about it

The Data Protection Commission is Ireland’s data protection regulator, and it does take these complaints: its domestic CCTV case studies record 157 complaints in 2024 about recording devices such as domestic CCTV systems and smart doorbells used by private individuals to protect their home and property.

It will

Take a complaint: “You can lodge a complaint with the DPC if you believe that a user of a domestic CCTV system does not follow the rules.”
Write to the camera’s owner “explaining the rules around the use of domestic CCTV systems”.

It will not

Order the camera down. In the DPC’s own words: “The DPC cannot order a private individual to remove or dismantle their domestic CCTV cameras.”
Act at all where the exemption applies — the operator is then “not deemed to be data controllers for the purposes of the GDPR and in such circumstances the DPC has no role to play”.
Tell you about your neighbour’s system: it “will not disclose details of that system to a complainant, as the GDPR would not be engaged and any such disclosure may compromise the security of the domestic CCTV operator”.

That last point catches people out. A complaint that ends with the DPC satisfied the camera is compliant will not come back to you with details of where it points or what it records, and that silence is deliberate.

Practical placement that keeps you inside the exemption

Frame your own property, not the route past it

Your door, your garden and your driveway are inside the exemption. The footpath, the road, a back alley and a neighbour’s garden are outside it.

Mask what you cannot avoid

The DPC points to the device’s own setting: “You can use your device’s ‘Privacy Zone’ feature, or equivalent, to block public areas from the view of your CCTV or doorbell camera with black boxes or bars.”

If there is no privacy zone, drop the angle

The other fix the DPC names: “You can adjust the angle of your CCTV or doorbell camera so that public areas are not being captured.”

Keep next door out of frame

The guide is explicit: “Care should be taken to avoid capturing neighbouring properties (house, garden etc).”

Remember the microphone

The DPC describes the exemption failing where a system captures “images and/or sounds” beyond your perimeter. Audio range counts as much as the lens does.

Keep the footage to yourself

Publishing clips online makes you a data controller. Handing footage to An Garda Síochána for a criminal investigation is treated separately, and is permitted.

The DPC’s own summary: “The DPC advises all householders to operate their devices in a way that only captures images within the perimeter of their own property to avoid complaints about the use of these devices to the DPC.”

Where this guidance does not apply

The DPC’s domestic guide covers cameras in a home setting. A camera at a business, a rental operation or a workplace is a different question with a different rulebook, and the DPC directs those operators to its separate CCTV guidance for data controllers.

Sources

Every rule on this page was read on these pages on 11 September 2026, and every quotation was checked against the DPC’s May 2026 guide again on 7 October 2026.

Guidance on the use of Domestic CCTV
The DPC’s guide for householders, covering fixed cameras and smart doorbells. The version we read is the PDF linked from this page, marked “Last Updated: May 2026”.
Guidance on the use of Domestic CCTV (PDF, May 2026)
The document itself. Every quotation on this page that is not attributed to the case studies below comes from it.
Case studies: Domestic CCTV
The DPC’s 2024 domestic CCTV case studies. Source of the 157-complaint figure, of the DPC having “no role to play” where the exemption applies, and of what it will not disclose to a complainant.
Judgment in Case C-212/13, Ryneš
The Court of Justice judgment of 11 December 2014 that the DPC’s guidance rests on. Checked against EUR-Lex for the case name and date, which the DPC’s PDF gives with a typo.