The short answer
Make the notice work by splitting it into two layers. On the first-layer sign at every entrance, put a camera pictogram, one plain sentence that recording is active, the purpose, the controller's name, and a contact. Push the full detail—retention, rights, who may watch—into a second layer via QR code, website, or paper leaflet. Test readability, sight lines, and lighting, and confirm obligations in your jurisdiction.
Key takeaways
- Structure disclosure in two layers: a short warning sign at each entrance plus a complete second-layer notice on a website, QR code, or paper.
- Keep the first-layer sign to the essentials—camera, purpose, controller, contact—because people pass it in one to two seconds.
- Write in plain, concise language with short sentences and a recognizable camera pictogram instead of legal boilerplate.
- Always keep the full information available in a non-digital form for people without a smartphone or network access at the moment they enter.
- The first layer should surface anything that would surprise a person, such as audio recording, live viewing, or sharing footage with third parties.
- Employee surveillance needs more than signage: inform staff individually, and follow workplace-representation and labour rules in your jurisdiction.
Why most surveillance notices fail
Most warning signs satisfy a compliance checkbox without informing the person walking past. Tiny type, stock wording, and phrases such as "by entering you consent" do the opposite of clarity: a passer-by has one or two seconds to register that cameras are present, why, and whom to ask. If the sign does not answer those three questions instantly, it has failed its purpose.
Transparency under the GDPR means providing information in a concise, transparent, intelligible and easily accessible way, in clear and plain language. Mounting a sign that nobody can read, in a language visitors do not understand, or that hides the controller's identity, does not meet that standard. Regulators treat the sign as the first moment of genuine notice, not as a paperwork artifact.
Common failure modes that make a notice ineffective:
- Small print and low contrast make the text unreadable even from close up.
- Legal jargon and long sentences instead of a short human phrase.
- One shared sign for an entire site where there are multiple entrances.
- No camera pictogram, though a symbol is understood without reading.
- No contact or controller name, so there is no one to ask and nowhere to follow up.
Design for two layers, not one wall of text
The pattern recommended by data-protection authorities is layered. The first layer is a warning sign at the entrance carrying only the most relevant facts: that recording is active, for what purpose, by whom, and how to get details. The second layer holds the complete Article 13 information: retention period, data subject rights, recipients of the footage, and how to complain.
Splitting the information this way keeps the physical sign readable while still making the full notice genuinely available. The second layer can live on a website, behind a QR code printed on the sign, by phone, at an information desk, or as a printed leaflet. A non-digital route should always exist, because not every visitor has a working smartphone or network at the moment they arrive.
Anything that might surprise the person should appear in the first layer: audio recording, live monitoring, transmission of images to third parties, or storage outside the jurisdiction. Surprises buried in a link defeat the purpose of early notice.
What the first-layer sign must carry
The first layer is not the place to enumerate legal articles. It should carry a camera pictogram, a short sentence that recording is taking place, the purpose, the name and contact details of the controller (and data-protection officer if one is appointed), a note that data subjects have rights, and a pointer to the complete notice.
Authorities converge on the same core elements: purpose of the processing, identity and contact of the controller, the rights available to individuals, and anything with the greatest influence on the person being filmed. Place the sign at eye level, permanently, before a person enters the monitored area, and give every separate entrance its own sign.
Write in plain, human language
Start with a short headline that answers the real question: "This area is under video recording." Follow with one line on why: "for security and protection of property." End with the controller's name and a contact on its own line. This order reads top to bottom like an ordinary message and does not force the visitor to parse legal structure.
Read the text aloud. If a sentence needs a second pass, simplify it. Replace jargon with everyday words, split long clauses, and prefer active verbs. Avoid framing entry as implied consent—such phrasing builds distrust more than it builds clarity. Write in the language most visitors actually read, add a second language or rely on universal symbols when the audience is diverse, and keep sentences short enough for low-literacy readers.
Placement people actually see
Signs must be positioned before the surveilled area so that people understand they are being filmed before crossing the boundary. Place them at eye level, at every entrance and, where useful, at exits. Use a sufficient size, high contrast, and good lighting; a dark sign on an unlit facade will not do its job after sunset.
Keep the panels readable over time. Because a physical panel cannot carry the whole Article 13 text without becoming illegible, authorities explicitly allow moving the complete information to a website or second channel. Check signs on a schedule—they fade, get covered, or become inaccurate when cameras are added or purposes change.
Employees and other special cases
Surveillance of employees needs more than a sign at the door. Staff must be informed individually and in advance about the purpose, scope, and conditions of recording, and workplace-representation rules may require collective information first. A practical pattern combines a level-one panel on the premises with a level-two notice on the intranet or in internal rules, plus individual notice at hiring or when the system is introduced.
Occasional visitors and contractors who may be filmed also need access to the complete notice, not just the panel. Keep a printed copy available at reception or on request, and make the detailed notice reachable through the same link, QR code, or phone number shown on the sign. For all of this, confirm the precise obligations in your own jurisdiction and treat this material as general guidance, not legal advice.
Put it into practice
Two-layer notice brief: a nine-point sign audit
Run this audit at every entrance before installing or updating a notice. If any item fails, fix it before the system goes live or the change is announced.
- A camera pictogram is present and recognizable without reading text.
- The headline answers the core question: "this area is under video recording."
- The purpose is stated in plain words (security, protection of property or people).
- The controller's name and a working contact (phone, site, e-mail) appear.
- Anything surprising is surfaced: audio, live viewing, sharing with third parties, off-site storage.
- Rights of individuals and a pointer to the full notice are included.
- A sign stands at every entrance at eye level, readable before entering the zone.
- Type is large and high-contrast and the sign works in day and evening light.
- The full second-layer notice is reachable by QR code, on a website, and in a non-digital form.
Questions people ask
What must a video-surveillance warning sign contain?
The essentials, kept short: a camera pictogram, a plain sentence that recording is active, the purpose of the surveillance, the identity and contact details of the controller (and data-protection officer if appointed), a note that individuals have rights, and a pointer to the full notice. Anything surprising, such as audio recording, live viewing, or sharing footage with third parties, should also appear in the first layer. Exact legal requirements vary by jurisdiction, so confirm local rules.
Is consent required to record people on camera?
Often not for ordinary CCTV aimed at security, because the controller relies on a legal basis such as legitimate interest rather than consent. When that is the case, the GDPR and equivalent frameworks require clear information instead—usually a layered notice with a first-layer sign and a complete second-layer notice. Consent may be needed in specific cases, such as monitoring employees or using footage for purposes beyond security. Check the legal basis and the local rules that apply to your processing.
Where should video-surveillance signs be placed?
Place signs at eye level, permanently, before a person enters the monitored area, and give every separate entrance its own sign. A person must understand they are being filmed before crossing the boundary of the zone. Signs should be large enough to read from a short distance, with sufficient contrast and lighting for day and evening. If separate areas are monitored, each needs its own sign.
How do I make a surveillance notice easy to understand?
Use plain language and visual symbols. Start with a short headline that answers whether the area is recorded, state the purpose in one line, then give the controller and contact. Replace jargon with everyday words, break up long sentences, and avoid phrasing that treats entry as implied consent. Add a camera pictogram, large high-contrast type, and a second language when your audience is diverse. Read the text aloud and simplify anything that needs a second pass.
What are the two layers of information for video surveillance?
A layered approach recommended by regulators and reflected in EDPB guidance. The first layer is a short warning sign at each entrance with the essentials: recording, purpose, controller, contact, and a pointer to more detail. The second layer is the complete notice under Article 13—retention period, data-subject rights, recipients, and how to complain—available on a website, by QR code, by phone, or on paper. A non-digital route should always exist.
Do employees need separate notice about video surveillance at work?
Yes. A sign at the entrance is not enough for employees. They must be informed individually and in advance about the purpose, scope, and conditions of recording, and labour or works-council rules may require collective information first. A common pattern is a level-one panel in the workplace plus a level-two notice on the intranet or in internal rules, with individual notice at hiring or when the system is introduced. Confirm the exact requirements in your jurisdiction.
Sources and further reading
Sources were checked when this page was generated. Confirm changing dates, rules and prices with the original publisher.
- Inform about your video-surveillanceSwedish Authority for Privacy Protection (IMY)
- Principle of transparency — video surveillanceNational Commission for Data Protection (CNPD), Luxembourg
- Vidéoprotection : le public doit-il être informé qu'il est filmé ?CNIL (Commission nationale de l'informatique et des libertés)
- Exemple d'information pour un dispositif de vidéosurveillance sur les lieux de travailCNIL (Commission nationale de l'informatique et des libertés)
- По требованию прокуратуры Корочанского района устранены нарушения законодательства об охранной деятельностиГенеральная прокуратура Российской Федерации