The legal landscape: no single CCTV law
Canada regulates video surveillance through a patchwork. Federally regulated employers (banks, airlines, telecoms, interprovincial transport) fall under PIPEDA. British Columbia, Alberta, and Québec have their own substantially similar private-sector privacy laws. In provinces like Ontario and Nova Scotia, provincially regulated employers' handling of employee information sits under a more fragmented framework — employment law, common-law privacy torts, workplace policies, and collective agreements — but commercial customer-facing surveillance still engages PIPEDA, and privacy commissioner guidance sets the practical standard everywhere.
The core principles that apply everywhere
- Legitimate purpose. Surveillance must serve a real, documented need — site safety, security of people and property, incident investigation. "Because we can" is not a purpose.
- Proportionality. Monitoring should be the least intrusive way to meet that purpose. Continuous, individualized employee monitoring without cause is generally considered excessive.
- Openness. People must be informed. Post clear signage at entrances and monitored areas stating that surveillance is in use, why, and whom to contact. Covert workplace surveillance is treated as a serious violation outside narrow, justified investigations.
- Placement limits. No cameras in washrooms, change rooms, or staff lounges absent extraordinary justification.
- Data handling. Limit retention, restrict access to those who need it, and secure recordings.
Practical compliance checklist
- Write down the business reason for each camera and what it covers.
- Conduct a privacy impact assessment before installing or expanding a system.
- Post compliant signage at every entrance and monitored zone.
- Set a retention schedule and delete on schedule.
- Define who may access footage, for what purposes, and log access.
- Tell employees about the system in policy language they can find.
- Review the system annually — purposes drift, sites change.
How managed monitoring fits compliance
A rules-based monitoring service can strengthen compliance rather than threaten it. When review scope, escalation contacts, and monitored zones are documented and agreed in advance — as in Visualitic's programs — the surveillance is inherently purpose-driven and auditable. Review focuses on safety exceptions, operational events, and security-relevant activity, not continuous observation of individuals, and every reviewed event produces a time-stamped record of what was looked at and why.
Where employers get caught out
- Installing cameras for security, then using footage for performance management — purpose creep undermines the legal basis.
- Missing or vague signage.
- Cameras drifting to cover break areas after renovations or repositioning.
- Indefinite retention "just in case."
- No documented answer when an employee or regulator asks "why is this camera here?"
Review your camera program for compliance.
We design monitoring scopes that are documented, proportionate, and defensible.
Book a Site Visibility Review