Dash Cam Laws UK: What Fleet Managers Need to Know in 2025

In a world where every vehicle is a potential witness, dash cams have moved far beyond being a simple accessory for individual drivers. For fleet managers, they are a critical piece of technology that offers tangible benefits, from faster insurance claims to improved driver behaviour. However, with this power comes new, defined legal responsibilities.

Data privacy laws are constantly evolving, and a proactive approach is key. In this guide to the dash cam laws in the UK for 2025, we’ll show you how to build a compliant dash cam program, transforming a legal obligation into a strategic asset.

The Legal Cornerstones of Your Dash Cam Program

The legal framework for dash cam usage in the UK combines several regulations, and a compliant program must address both physical installation of the devices and the handling of the data they record. To build a solid policy that protects your business and drivers, you must understand three key regulations: The Highway Code, UK GDPR, and the new Data (Use and Access) Act 2025.

The Highway Code and Physical Placement

The physical installation of a dash cam is governed by The Highway Code and The Road Vehicles (Construction and Use) Regulations 1986. The core rule is simple yet critical: the camera must not obstruct the driver’s view of the road in any way. Specifically, the device must not intrude more than 40mm into the area of the windscreen swept by the wiper blades.

Failure to adhere to this rule can lead to fines, penalty points, and can even cause a vehicle to fail its MOT. For this reason, the safest approach is to install the dash cam discreetly and securely behind the rear-view mirror, where it remains out of the driver’s line of sight while capturing a clear, wide view of the road. A camera mounted too low risks not only penalties but also being used as evidence of negligence if an accident occurs.

GDPR and the “Data Controller” Obligation

Under UK GDPR, any footage that captures identifiable individuals (such as drivers, pedestrians, or number plates) is classed as personal data. This means fleet managers become the “data controller,” with a legal duty to protect that information. You must have a lawful basis for processing it, and for most fleets, the most relevant basis is “legitimate interest,” such as preventing crime, promoting driver safety, deterring fraud, or protecting assets. This justification must be clearly documented in your company policy. Recording without informing people, such as with an inward-facing camera, can be a direct GDPR breach even if the footage is never shared.

The Data (Use and Access) Act 2025

The new Data (Use and Access) Act 2025 has modernised the UK’s data protection framework, introducing changes especially relevant for fleet operators. One key update is the introduction of “recognised legitimate interests” for activities like crime prevention, which reduces the need for a full Legitimate Interest Assessment in these specific cases.

The Act also refines how Subject Access Requests (SARs) should be handled, requiring organisations to conduct “reasonable and proportionate” searches rather than exhaustive ones. While this helps avoid the operational strain of searching vast archives, it does not remove the need for a formal, documented process.

Building a Compliant Dash Cam Policy

A strong, legally compliant policy is the backbone of any successful dash cam program, and you can use this five-point checklist to build one from scratch.

1.   Clear and Transparent Communication

Every fleet should have a clear, written dash cam policy that sets out exactly why the cameras are in place, what types of data are collected (such as forward-facing video, GPS location, or audio) and how long that data is retained. It should also explain how drivers can request access to their own footage. Making the policy part of driver onboarding embeds it in your company culture, and ensuring every existing driver formally acknowledges it, such as through a signed agreement or email confirmation, creates a simple audit trail. Remember that recording inside a vehicle’s cabin without informing drivers could still breach GDPR, even if the footage is never shared, because individuals have the right to know they are being recorded.

2.   Secure Data Management

Keeping dash cam footage secure is a legal and operational necessity. All data should be stored with encryption, whether on the device or in a secure cloud system, and access must be restricted to a small number of trained, authorised staff. A robust, all-in-one platform like our 4G fleet dash cam, SmartCam simplifies this by automatically uploading footage to a secure, encrypted cloud system, ensuring a clear audit trail of who accessed footage, when, and why.

Systems that allow footage to be downloaded to personal devices are a risk, as a driver saving a clip to their phone could inadvertently cause a GDPR breach. The safest approach is to maintain a complete audit trail showing who accessed footage, when, and why, ensuring your data practices demonstrate strict control.

3.   Data Retention and Minimisation

UK GDPR requires organisations to only keep personal data for as long as it is genuinely needed, and dash cam footage is no exception. A good practice is to configure cameras to automatically overwrite or delete unflagged footage after a set period, typically 30 days.

SmartCam is designed to handle this automatically, allowing you to set a custom retention period. This not only prevents the unnecessary accumulation of personal data but also helps you comply with GDPR’s data minimisation principle. Critically, footage related to a flagged incident, such as a harsh braking event or collision, is automatically uploaded and stored securely in the cloud, ensuring important evidence is retained while routine, unneeded footage is responsibly deleted. This automated process removes the burden of manual deletion and reduces the risk of non-compliance.

If a clip needs to be retained longer, it should only be done with a clear legal or operational justification, which should always be recorded. Holding onto months of old footage unnecessarily is not only a waste of storage but could also be a breach of data minimisation rules.

4.   Informing the Public

Any vehicle with an active dash cam operating in public spaces must display clear signage. Signs should state “CCTV in Operation” and direct people to a full privacy notice on your company website, where they can find details on how their data is processed. Skipping this signage might seem minor, but it can be treated as unlawful surveillance and lead to complaints to the Information Commissioner’s Office (ICO). Making your privacy notice easy to find and written in plain language will build public trust and help protect your business from legal action.

5.   Handling Subject Access Requests (SARs)

Anyone in dash cam footage has the right to make a Subject Access Request (SAR) to obtain a copy of it. Your organisation must have a formal process for receiving, logging, and responding to these requests within the one-month legal timeframe. This process should also include guidance on how to redact the personal data of other individuals in the footage before securely sharing it. As mentioned earlier, the Data (Use and Access) Act 2025 provides some flexibility by allowing “reasonable and proportionate” searches, but ignoring or mishandling a request can still put you in breach of your obligations, even if no footage exists.

The Business Benefits of Proactive Compliance

While the legal requirements may seem daunting, a well-structured, transparent dash cam program can be a powerful business asset. Beyond simply avoiding fines, compliance helps you run a more trustworthy, efficient, and legally defensible fleet. The benefits are tangible: reduced insurance premiums, quicker and more favorable claims resolutions, and measurable improvements in driver safety and behaviour. Far from being a cost centre, a compliant dash cam system is a strategic investment that safeguards your business, your drivers, and your reputation.

From Legal Burden to Strategic Advantage

It’s easy to think that navigating UK dash cam laws in 2025 is about ticking a compliance box, but it’s a chance to strengthen your fleet. By proactively setting a clear policy, maintaining open communication with drivers, and handling data responsibly, you can turn a potential legal headache into a competitive advantage.

An integrated system like SmartCam is a perfect example of a program that not only ensures you meet all your obligations but also delivers tangible benefits in safety and efficiency. This approach results in a fleet that’s safer, more transparent, and more efficient. In an industry where the future is driven by data, a compliant dash cam program isn’t just protection, it’s progress.

Ready to turn compliance into a competitive advantage for your fleet? Speak to a Crystal Ball expert today.