Ring doorbells, Nest cams, smart speakers, and indoor cameras have moved into family homes — what UK GDPR and the ICO's Age-Appropriate Design Code say about monitoring your own children, and where the safeguarding line sits.
Smart doorbells, indoor cameras, baby monitors, smart speakers, and connected appliances mean many UK family homes now contain a dense ring of microphones and cameras. Used carefully, they help with babysitter handovers, doorstep deliveries, and pet checks. Used carelessly, they create a continuous record of a child's voice, face, and routine, often hosted on overseas servers. The ICO has produced guidance on home CCTV and the boundary between domestic use and 'data controller' responsibilities, and the Age-Appropriate Design Code applies to many of the underlying services.
A typical setup combines a doorbell camera covering the street, one or two indoor cameras, a smart speaker per room, and an app that streams live and recorded footage to phones. Each device has its own retention period, its own sharing settings, and its own integrations. Risks come from a few recurring patterns: cameras pointed into a child's bedroom or bathroom 'for safety'; cameras shared with a separated parent, ex-partner, or family member without clear consent; footage of visiting children that the visiting family did not agree to; smart speakers transcribing private conversations to a parent's app; and devices left enabled long after they were needed.
1. Treat bedrooms and bathrooms as no-camera zones
There is almost never a safeguarding reason for a working camera in a child's bedroom or bathroom once they are out of infancy. Baby monitors should be removed or repositioned as soon as they are no longer needed.
2. Audit what your devices keep
In each app, set the shortest retention period that is genuinely useful, switch off conversation history on smart speakers, and delete old recordings periodically. Most apps now expose this in a privacy dashboard.
3. Tell visiting families
If your home has cameras or smart speakers, let other parents know before a playdate or sleepover. The ICO is clear that domestic CCTV pointing at others' property or capturing others' children carries data-protection responsibilities.
4. Update and lock down accounts
Use unique passwords and two-factor authentication on every camera and speaker account. Most reported family camera 'hacks' are credential reuse, not platform breaches.
Last reviewed: 2026-06-14