Ring doorbells, Nest cams, smart speakers, and indoor cameras have moved into family homes — what UK GDPR and the ICO's Age-Appropriate Design Code say about monitoring your own children, and where the safeguarding line sits.
Smart-Home Surveillance is the monitoring of children through internet-connected home devices such as cameras and speakers, raising concerns about privacy, data, and who can access the feeds.
Smart doorbells, indoor cameras, baby monitors, smart speakers, and connected appliances mean many UK family homes now contain a dense ring of microphones and cameras. Used carefully, they help with babysitter handovers, doorstep deliveries, and pet checks. Used carelessly, they create a continuous record of a child's voice, face, and routine, often hosted on overseas servers. The ICO has produced guidance on home CCTV and the boundary between domestic use and 'data controller' responsibilities, and the Age-Appropriate Design Code applies to many of the underlying services.
A typical setup combines a doorbell camera covering the street, one or two indoor cameras, a smart speaker per room, and an app that streams live and recorded footage to phones. Each device has its own retention period, its own sharing settings, and its own integrations. Risks come from a few recurring patterns: cameras pointed into a child's bedroom or bathroom 'for safety'; cameras shared with a separated parent, ex-partner, or family member without clear consent; footage of visiting children that the visiting family did not agree to; smart speakers transcribing private conversations to a parent's app; and devices left enabled long after they were needed.
In your child's behaviour
On their device
Treat bedrooms and bathrooms as no-camera zones
There is almost never a safeguarding reason for a working camera in a child's bedroom or bathroom once they are out of infancy. Baby monitors should be removed or repositioned as soon as they are no longer needed.
Audit what your devices keep
In each app, set the shortest retention period that is genuinely useful, switch off conversation history on smart speakers, and delete old recordings periodically. Most apps now expose this in a privacy dashboard.
Tell visiting families
If your home has cameras or smart speakers, let other parents know before a playdate or sleepover. The ICO is clear that domestic CCTV pointing at others' property or capturing others' children carries data-protection responsibilities.
Update and lock down accounts
Use unique passwords and two-factor authentication on every camera and speaker account. Most reported family camera 'hacks' are credential reuse, not platform breaches.
In immediate danger: call 999. For non-emergency police matters, call 101.
Concerned about a child but it's not an emergency? NSPCC helpline 0808 800 5000. Childline for young people 0800 1111.
This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.
Myth: Cameras and smart speakers inside my own home are a private, domestic matter, so data-protection rules don't apply.
Fact: Using cameras purely inside your own household is generally treated as domestic, but the ICO is clear that as soon as a camera or video doorbell captures people beyond your property — the pavement, a neighbour's garden, or visiting children — data-protection law applies to you. That means only keeping footage as long as you genuinely need it, being ready to respond if someone asks what you hold about them, and letting other families know before a playdate or sleepover.
Myth: A new baby monitor or indoor camera is secure the moment I plug it in.
Fact: Many cameras and monitors ship with a default or easily guessed password, and the NCSC says weak passwords are the main way strangers gain access to a home camera. Change the password straight away — three random words is a simple, strong choice — turn on automatic updates, and switch off remote internet viewing if you don't actually use it.
Myth: Putting a camera in my child's bedroom is just being a responsible, safety-conscious parent.
Fact: Once a child is past infancy there is rarely a genuine safeguarding reason for a working camera in a bedroom or bathroom, and these should be treated as no-camera zones. Constant watching of a child's own space tends to erode trust rather than build safety, and an honest conversation about check-ins usually does more than a lens.
Choose a baby monitor or nursery camera from a maker that still issues security updates, change its default password immediately, and turn off remote internet viewing unless you truly need it. Reposition or remove the monitor as soon as it is no longer serving a purpose.
Keep cameras out of bedrooms and bathrooms now infancy has passed, and tell visiting families about any video doorbell or smart speaker before a playdate. Periodically clear old smart-speaker recordings, which can otherwise sit stored for a long time.
Explain in simple terms which rooms have cameras or speakers and why they are there, so being recorded is never a surprise. Review each device's app together and delete recordings you no longer need.
Respect a growing need for privacy by keeping cameras out of your child's own room, and involve them in decisions about what the home's devices record and who can see it. If a device's live feed is shared with a separated parent or relative, make sure that sharing is clear and agreed.
Avoid using indoor cameras to monitor a teenager's own space, as covert or constant watching damages trust and their reasonable expectation of privacy. Talk openly about safety and check-ins instead, and let them help audit what the household's devices keep.
Treat a near-adult as any other household member whose data and privacy count, and make sure any camera or speaker access they are part of is by agreement. Remove monitoring they have not consented to, and hand over control of their own accounts and passwords.
Was this page helpful?
Get practical child safety updates in your inbox. No spam.