Hi guys,
Sorry I'm a bit late on picking up this thread, but just for the purposes of clarity, here in the U.K. all domestic use of CCTV is exempt from the Data Protection Act.
In fact, many commercial systems which were previously thought to be required to comply with the legislation, are now also considered outside the scope of the law.
The change has come about after a court ruling, which has provided an opportunity for the Information Commissioners Office to clarify the situation.
It is not so much the type of CCTV equipment that is being used, as the way in which it is being used. So for example, a passive system which is set up purely for recording individuals using fixed cameras, and which is only ever reviewed in the event of an incident, would not as such require notification and compliance.
A remote control camera system that is being used to monitor individuals, would most certainly be required to comply.
Apart from the Data Protection Act, all externally mounted cameras are required to comply with "Permitted Development" planning legislation, and those used by larger organisations may also possibly be subject to selected parts of the Human Rights Act and the Regulation of Investigatory Powers Act (RIPA 2000).
Who ever said things were meant to be easy