Can I install a home security camera that films the street or the neighbour in Malta?
You can install a camera on your own property, but it must look only at your own property — not the street or the neighbour. According to the IDPC, a camera that captures only your own home falls under the household exemption of the GDPR. But the moment the camera captures, even partially, a public space or the neighbour's property, it loses the exemption and you become a "controller" with full GDPR obligations (as the European Court ruled in Ryneš, C-212/13). The myth: that "it's my house, so I point the camera wherever I like" — no. PTZ (pan-tilt-zoom) cameras are considered non-compliant because they can be adjusted covertly; audio is rarely justified; there must be a sign giving notice; and footage should not be kept more than a few days (beyond 72 hours is hard to justify). Doorbell cameras generally fall outside the GDPR because they only record for a few seconds.
📋 The rules
- A camera that captures only your own private property falls under the household exemption and is generally not regulated by the GDPR.
- The moment the camera captures, even partially, the street, the pavement or the neighbour, it loses the exemption and you become a "controller" under the GDPR (Ryneš C-212/13).
- PTZ (pan-tilt-zoom) cameras are considered non-compliant; the IDPC recommends a fixed-position model, and audio is rarely justified.
- There must be a visible sign giving notice to people passing that recording is taking place, with the purpose and who the controller is.
- Footage should not be kept more than a few days; storage beyond 72 hours is hard to justify.
🔓 Exceptions
- You may capture a small portion of public space only if you can show a legitimate interest (e.g. real burglary or threat) and the monitoring is proportionate and minimal.
- Doorbell cameras generally fall outside the GDPR because they only record for a few seconds when someone approaches the door.
- In the common parts of a block, installing CCTV normally needs the agreement of the condomini and additional data-protection rules.
⚠️ Penalties & fines
A camera that captures beyond your boundary and breaches the GDPR can lead to a complaint to the IDPC, which can investigate, order the camera to be moved or switched off, and in serious cases impose an administrative fine under the GDPR. The IDPC has already taken action in cases of CCTV in apartments and blocks where cameras captured too much. Beyond the fine, a neighbour who feels watched can bring civil proceedings for breach of privacy and nuisance, and you can be required to delete the footage. If you keep audio or use a PTZ camera, your position weakens further because these are considered intrusive by default. Even if you are never fined, a badly aimed camera can invalidate the use of the footage as evidence and turn the advantage against you in a dispute. The practical tip: aim the camera down at your own door or yard, use a fixed position, put up a sign, and delete the footage after a few days.
📎 Official sources
- IDPC · CCTV guidelines for individuals →
- Legislation Malta · Data Protection Act (Cap. 586) →
- IDPC · how to file a complaint →
❓ Frequently asked
Can I aim the camera at the street to catch whoever steals cars?
Generally no, unless you can show a real legitimate interest and the monitoring is proportionate and minimal. The moment the camera captures the street or the neighbour it loses the household exemption and you become a controller under the GDPR, with duties of signage, minimisation and short retention.
The neighbour has a camera pointing at my door — what can I do?
First try talking to the neighbour to adjust the angle so it captures only their own property. If that does not work, you can file a complaint with the IDPC, which can investigate and order the camera to be re-aimed or the footage deleted.
How long can I keep CCTV footage?
As a rule the footage should not be kept more than a few days, and beyond 72 hours is hard to justify. After the purpose of the monitoring, the footage should be deleted automatically unless there is a genuine reason to keep it.
Do I need a sign saying I am recording?
Yes, when the camera captures areas where people may pass, you must put up a visible sign giving notice of the recording. The sign should state the purpose, who the controller is and how people can exercise their rights under the GDPR.
Is a doorbell camera regulated like CCTV?
Generally no, because doorbell cameras only record for a few seconds when someone rings or approaches the door. The risk to people's rights is considered negligible, so they normally fall outside the same obligations as continuous CCTV.
🔎 Common searches
What people search to land here:
- “home cctv malta law”
- “cctv neighbour gdpr malta”
- “camera filming street malta”
- “idpc cctv malta”
- “doorbell camera malta gdpr”
- “cctv footage retention malta”