Data protection law says that people who capture images or audio recordings from outside their property boundary must: have a clear reason for using the CCTV; make sure the CCTV doesn't capture more than they need to; let people know they are using CCTV (eg by displaying a sign);