Today, the world is living in the age of AI, where people can be easily reached, communicated with, accessed or stalked through their digital gadgets. These digital gadgets and technologies are coming out to make life faster, easier and more comfortable, but at the same time, humans are also misusing or abusing these digital gadgets and technologies. Indeed, there are always two sides of the same coin, but then the question arises: what to do? How to do? Who to do? When to do? These questions must be examined, explored, formulated, and decided on the issues faced by innocent people.
The Area needs to be Explored
CCTV (Closed-Circuit Television), henceforth referred to as CCTV, systems have become an indispensable part of today's world, whether it is a public spaces, private spaces, or workplaces worldwide, promising or creating a sense of security and safety. It has become a ubiquitous and less expensive security system which can be easily accessible from one place of seating and even from any part of the world through internet connectivity in your digital gadgets. However, the rapid proliferation and installation of CCTV anywhere and anytime has raised significant, alarming questions regarding privacy violations, data breaches, and accountability, underlining the urgent need for comprehensive legislation for precise regulation.
The Battle of Crimes and Justice
Every day, millions of people walk past CCTV cameras without realising who is watching, what is being recorded, and where that footage may end up, raising a sensitive issue for policy stakeholders. There are many cases which are in the limelight, but there are also a series of events that happened in the past. In 2020, hackers scanned CCTV networks across India, and over 50,000 videos were taken. The shocking investigation by the Gujarat Police revealed that these videos were packaged and sold online. Horrifically, the investigation also revealed that the videos include CCTV footage of Payal Maternity Hospital in Rajkot. In 2025, when the CCTV footage of state-run cinemas leaked online, a case was filed, and investigation reports revealed that clips were being sold as soft porn, but ultimately, no reports were found on what happened after that. In December 2025, The News Minute investigation found that CCTV has been installed anywhere and at any place, even in the hospital delivery zone, and these videos are sold as soft porn. In March 2026, the Ghaziabad Police arrested the people accused of illegal installation and spying through CCTV at a railway station and selling it to Pakistan, also bringing people into a sense of fear that even the gadgets which are installed for their safety and security are not safe. These are not just a few cases, while numerous incidents have occurred in malls, hotels, restaurants, schools, colleges, and even private spaces. These instances are not only demonstrating the loopholes in the rules and regulations but also raising serious questions about governance, public safety and security.
Approaches to Regulate CCTV
In this globalised world, nations are taking steps to secure the privacy of people. In the famous case of Justice K.S. Puttaswamy v. Union of India, the apex court held that the Right to Privacy is enshrined under Article 21 of the Indian Constitution. But how this right would be protected- the answer itself raises a question mark. In India, the IT Act, 2000 is the primary act governing electronic surveillance. If anyone breaches privacy by electronic means and captures or transfers private parts, male or female, without consent, the accused can be charged under Section 66E of the IT Act, 2000. The Information Technology Rules, 2021, and the Right to Privacy and the Digital Personal Data Protection Act, 2023, also deal with surveillance. However, there are no detailed guidelines or legislation for CCTV installation and surveillance.
The UK legislation enacted a law regarding CCTV regulation, called the Protection of Freedoms Act 2012 (Code of Practice for Surveillance Camera Systems and Specification of Relevant Authorities) Order 2013. It provides that there must be clear signage, valid reasons for the surveillance and registration with the ICO (Information Commissioner's Office).
In Nepal, the Privacy Rule, 2020 empowers the District Administration Office to appoint an examination and observation team to regularly check and inspect CCTV cameras to ensure adherence to legislative requirements.
In the EU, the General Data Protection Regulation (GDPR) regulates the use of CCTV and security cameras. It aims to ensure that there must be a lawful interest and minimal intrusion to install CCTV.
Consequently, due to the rising use of Artificial Intelligence and technologies, it is very important to regulate and govern the installation and use of CCTV. As it is also said, “Law is derived from the Social Facts”, and it should evolve with the changing nature and needs of the society. Hence, it is high time for policy stakeholders to think and bring rules on this serious matter.
Recommendations and Way Forward
The principal cause behind the increasing misuse of CCTV systems is the absence of a comprehensive legal framework governing their installation, storage of footage, access, and monitoring. In the absence of clear rules, CCTV systems are vulnerable to abuse, resulting in serious violations of privacy, data and dignity. Therefore, public policy must establish a legal regime that is fair, just, transparent, and consistent with constitutional principles. The unauthorised sale and circulation of hospital CCTV footage further demonstrates the lack of accountability and regulatory safeguards. Sensitive recordings from hospitals and other private spaces are being misused because there are no clear standards regarding who may access such footage, how long it may be stored, and under what circumstances it may be disclosed.
To counter all these problems, the government should enact a CCTV regulations act which could ensure the safety, security and dignity of the people. The following recommendations can be taken care of while formulating the act regarding it: End-to-end encryption, security and passwords of the system, because it is found that many use default passwords like Admin@123 or Admin123, which makes it easy for hackers to hack. So, encryption for storage, access, and two-factor authentication are needed. Accountability: The government can empower all public spaces to designate a post that will work like a whistleblower or watchdog and can be held liable for any violation. Mandate Licensing: There should be an online registration system where the installation, storage and all the details must be registered, and a legal system for Justice: There should be establishment of fast-track courts and a fair justice system which could ensure that victims must get Nyaya (Justice) and the guilty must get Dand (Punishment). Because the right to Privacy and Dignity is our fundamental right enshrined under Article 21 of the Indian Constitution.
The above recommendations could be a positive step towards protecting people's rights in this fast-paced AI world. These would not only prevent the misuse of the CCTV system but also ensure the legitimate purpose of public safety and security.
In conclusion, CCTV should not be allowed to operate in a legal loophole or vacuum where anyone can commit a crime easily without any fear. The above-mentioned incidents show the culmination of unregulated CCTV systems, which are for safety and security but become a tool of exploitation rather than protection.
The enactment and enforcement of proper and stricter statutes would balance people's basic rights with new and modern enhancements in technology and Artificial Intelligence. The Regulation of CCTV shall not only create a sense of safety and security, but it shall also build transparency, accountability and public trust.
Author is a 2nd-year Law student at Lloyd School of Law. Views are personal.