Spy Camera Laws by Country: US, UK, Australia, Singapore, Malaysia, Hong Kong & Taiwan (2026)

Spy camera legality depends entirely on where you are and what you're recording. In most countries, video recording in your own home for security purposes is legal — but audio recording almost always has stricter rules requiring consent. Recording in bathrooms, bedrooms of others, and changing areas is illegal everywhere covered in this guide, with criminal penalties ranging from fines to imprisonment. The seven countries below each have distinct laws: US federal wiretap law (18 USC 2511), UK's RIPA 2000, Australia's state-based Surveillance Devices Acts, Singapore's PDPA, Malaysia's PDPA 2010, Hong Kong's Cap 589, and Taiwan's Criminal Code Article 315-1.

This is the only guide that covers spy camera legality across all seven of these jurisdictions in one place. If you're buying a camera from XXSCAM, traveling with a camera, or monitoring property in multiple countries, this is the reference you need.

A note before we start: this guide provides general legal information, not legal advice. Laws change, court interpretations evolve, and your specific situation may involve factors not covered here. If you're facing a legal issue involving surveillance recording, consult a lawyer in the relevant jurisdiction.

---

United States

US surveillance law operates on two levels: federal law sets the floor, and state laws can (and do) add stricter requirements on top.

Federal Law: 18 USC Section 2511

The federal Wiretap Act (18 U.S.C. 2511) prohibits the intentional interception of "wire, oral, or electronic communications" without the consent of at least one party to the communication. Courts have consistently interpreted this statute to focus primarily on audio interception.

Video recording in your own home or property — even covertly — is not prohibited by the federal Wiretap Act. The statute targets communications (conversations), not visual observation. There is no federal law that broadly criminalizes video-only surveillance by a private individual in their own home.

Audio recording is where federal law creates obligations. Under the federal one-party consent rule, you can record a conversation you are a party to, or authorize someone else to record on your behalf. You cannot record a conversation between two other people in which you are not a participant.

State Laws: The Consent Patchwork

States fall into two categories for audio recording:

One-party consent states (the majority): Recording a conversation is legal if one party to the conversation consents. As the homeowner, your consent satisfies this requirement for recordings in your own home — even if the other person doesn't know they're being recorded.

All-party (two-party) consent states: Every party to a conversation must consent to the recording. States in this category include:

Video-Specific State Laws

Several states have laws specifically addressing hidden video recording:

• California Penal Code 647(j) criminalizes using a concealed camera to record someone in a "private area" or under clothing, or in a room where the person has a reasonable expectation of privacy.
• New York Penal Law 250.45 makes unlawful surveillance a Class E felony — recording someone without consent in a place where they have a reasonable expectation of privacy.
• Texas Penal Code 21.15 specifically addresses "improper photography or visual recording" and is a state jail felony.

Workplace Surveillance

US employers generally have broad authority to monitor employees using video cameras in the workplace, with key exceptions:

• Restrooms, changing areas, and break rooms are off-limits
• Union workplaces may have collective bargaining agreements that restrict surveillance
• Employers are not required to notify employees of video monitoring in most states, though some states (Connecticut, Delaware) require written notice
• Audio recording of employees triggers the same one-party/all-party consent rules as any other recording

Practical Summary for the US

• Video in your own home: Legal everywhere, no disclosure required
• Audio in your own home: Legal in one-party consent states; requires consent or disclosure in all-party consent states
• Video/audio in someone else's space: Legal only with the property owner's consent and where subjects don't have a reasonable expectation of privacy
• Bathrooms, bedrooms of guests, changing areas: Illegal everywhere
• Federal penalty for wiretap violations: Up to 5 years imprisonment and $250,000 fine

---

United Kingdom

UK surveillance law is governed by multiple overlapping statutes, creating a framework that's more complex than it first appears.

Regulation of Investigatory Powers Act 2000 (RIPA)

RIPA primarily governs surveillance by public authorities (police, intelligence services), but it establishes the legal framework that contextualizes private surveillance. Under RIPA, "directed surveillance" — covert observation of specific individuals — requires authorization even for public authorities.

For private individuals, RIPA itself doesn't directly create criminal offenses. The relevant offenses come from other statutes.

Data Protection Act 2018 and UK GDPR

The Data Protection Act 2018 (which incorporates UK GDPR post-Brexit) governs the processing of personal data, including CCTV and hidden camera footage. Key provisions:

• Domestic purposes exemption (Section 2, DPA 2018): Processing personal data for purely personal, family, or household activities is exempt from most DPA requirements. A home security camera or nanny cam used by a private individual in their own home typically falls within this exemption.
• The exemption has limits: If your camera captures footage of people outside your property (neighbors, passersby on a public road), you may need to comply with UK GDPR requirements including having a lawful basis for processing and responding to subject access requests.

The Information Commissioner's Office (ICO) has published specific guidance on domestic CCTV use. Their position: cameras that monitor only your own private property are covered by the domestic exemption. Cameras that capture public spaces or neighbors' property may not be.

Voyeurism (Offences) Act 2019

This statute specifically criminalizes recording beneath clothing ("upskirting") and recording private acts without consent. It was introduced following high-profile campaigns and carries:

• Penalty: Up to 2 years imprisonment
• Sex offender registration for the most serious cases

Protection from Harassment Act 1997

If hidden camera use forms part of a pattern of behavior that causes distress, it may constitute harassment under this Act, carrying up to 5 years imprisonment for the most serious forms.

Workplace Surveillance in the UK

Employers can use CCTV in the workplace but must comply with UK GDPR:

• Employees must be informed that monitoring is taking place (ICO Employment Practices Code)
• A data protection impact assessment should be conducted
• Recording in toilets, changing rooms, and private areas is prohibited
• Covert workplace surveillance is permissible only in exceptional circumstances (e.g., investigating suspected criminal activity) and should be proportionate and time-limited

Practical Summary for the UK

• Video in your own home: Legal under domestic purposes exemption
• Audio recording: No specific all-party consent requirement for private recordings, but the context matters — recording private conversations may engage harassment or data protection laws
• Cameras capturing outside your property: May require GDPR compliance
• Bathrooms, bedrooms of others: Criminal offense under voyeurism and sexual offenses legislation
• Workplace: Permitted with notice and GDPR compliance; covert monitoring only in exceptional circumstances

---

Australia

Australia has no single national spy camera law. Each state and territory has its own surveillance devices legislation, and the federal Privacy Act 1988 adds an additional layer.

Federal: Privacy Act 1988

The Privacy Act governs how organizations handle personal information, including video footage. However, it contains a household exemption: individuals processing personal information for personal, family, or household purposes are exempt from the Australian Privacy Principles.

A home security camera operated by a private person in their own home falls within this exemption. The exemption disappears when the activity becomes commercial — if you operate a holiday rental, the Privacy Act applies.

State Laws Overview

Key Principles Across All States

Despite the variation, consistent principles emerge:

• Recording in private spaces without consent is criminal in every state and territory. "Private spaces" includes bedrooms, bathrooms, change rooms, and any area where a person has a reasonable expectation of privacy.
• Your own common areas (living room, kitchen, hallway) are generally permissible to monitor without disclosure.
• Audio recording is regulated separately and more strictly than video in all states. Recording a private conversation without the consent of parties to the conversation is an offense in every jurisdiction.
• Publishing or distributing improperly obtained footage is a separate offense in most jurisdictions.

Workplace Surveillance

NSW has the most comprehensive workplace surveillance legislation: the Workplace Surveillance Act 2005 requires employers to give 14 days written notice before commencing camera surveillance of employees. Covert workplace surveillance requires a covert surveillance authority from a magistrate.

Other states rely on general surveillance device laws combined with workplace relations legislation.

Practical Summary for Australia

• Video in your own home (common areas): Legal in all states under household exemption
• Audio in your own home: State-dependent; generally requires consent
• Private spaces (bathrooms, bedrooms of others): Criminal offense everywhere
• Workplace: Varies by state; NSW requires 14 days written notice
• Penalty range: Up to 5 years imprisonment (NSW maximum)

---

Singapore

Singapore's approach to privacy and surveillance is governed by the Personal Data Protection Act 2012 (PDPA) and several provisions of the Penal Code.

Personal Data Protection Act 2012 (PDPA)

The PDPA governs the collection, use, and disclosure of personal data by organizations. Key provisions relevant to spy cameras:

• Consent obligation: Organizations must obtain consent before collecting personal data, which includes identifiable video footage
• Purpose limitation: Data can only be used for the purpose for which consent was given
• Domestic exception: The PDPA does not apply to individuals acting in a personal or domestic capacity. A home security camera operated for personal use falls within this exception.

The Personal Data Protection Commission (PDPC) enforces the PDPA and has issued several decisions relevant to surveillance:

• Employers installing CCTV must notify employees and display signage
• Businesses capturing customer footage must have a data protection policy
• Unauthorized sharing of surveillance footage can result in fines up to SGD 1 million for organizations

Penal Code Provisions

• Section 509: "Word or gesture intended to insult the modesty of a woman" — has been applied to voyeuristic recording. Penalty: up to 1 year imprisonment and/or fine.
• Section 377BB (post-2020 amendment): Voyeurism offense specifically addressing recording or observing someone's private parts without consent. Penalty: up to 2 years imprisonment.
• Section 377BD: Distribution of voyeuristic recordings. Penalty: up to 5 years imprisonment.

Films Act

The Films Act contains provisions that can apply to video recordings, though it's primarily targeted at commercial distribution rather than private surveillance.

HDB Flats and Condominiums

Singapore's housing landscape creates specific surveillance considerations:

• HDB common corridors: Cameras pointing at your own door are generally acceptable. Cameras capturing neighbors' doors or common areas may generate complaints to Town Council.
• Condominiums: By-laws may restrict camera installation. Check with your management corporation (MCST) before installing.
• Domestic helpers: Video monitoring of domestic helpers in common areas of your home is legal. Audio monitoring may engage PDPA protections even under the domestic exception if the helper's personal conversations are captured.

Practical Summary for Singapore

• Video in your own home: Legal under domestic exception
• Audio recording: Less clearly defined; PDPA domestic exception applies but wiretapping concerns remain
• Voyeuristic recording: Criminal offense under Penal Code (up to 5 years for distribution)
• Workplace: PDPA requires notification and consent for employees
• Key penalty: Up to SGD 1 million fine for organizational PDPA violations; up to 5 years imprisonment for voyeurism distribution

---

Malaysia

Malaysia's legal framework for surveillance involves the Personal Data Protection Act 2010 (PDPA 2010), the Penal Code, and several sector-specific regulations.

Personal Data Protection Act 2010 (PDPA 2010)

Malaysia's PDPA 2010 was one of the first comprehensive data protection laws in Southeast Asia. Key provisions:

• Section 6 (General Principle): Personal data shall not be processed unless the data subject consents, or the processing is necessary for specific purposes outlined in the Act
• Section 5 (Application): The Act applies to any person who processes personal data in commercial transactions. Personal and domestic activities are excluded.
• Section 7 (Notice and Choice Principle): Data subjects must be informed of the purpose of data collection

The domestic exception means a home security camera for personal use falls outside PDPA 2010 scope. However, if footage is shared commercially or used by a business, full PDPA compliance is required.

Penal Code Provisions

• Section 509: "Word or gesture intended to insult the modesty of a person" — applied to voyeuristic recording. Penalty: up to 5 years imprisonment.
• Section 292: Obscene materials — distribution of voyeuristic footage may be prosecuted under this section.

Malaysian courts have increasingly treated hidden camera cases seriously, particularly in cases involving:

• Shopping mall changing rooms
• Public restrooms
• Rental property bedrooms

Communications and Multimedia Act 1998

Section 233 prohibits the use of network facilities or services to create communications that are obscene, indecent, or menacing. This has been applied to cases involving unauthorized recording and distribution over the internet, with penalties of up to 1 year imprisonment and RM 50,000 fine.

Workplace Surveillance

Malaysian employment law does not specifically address workplace surveillance, but:

• Employers are expected to inform employees of monitoring under general employment principles
• Recording in restrooms and changing areas is a criminal offense
• The Industrial Court has considered surveillance evidence in unfair dismissal cases, generally accepting CCTV footage if the employee was aware of monitoring

Practical Summary for Malaysia

• Video in your own home: Legal under domestic exception from PDPA 2010
• Audio recording: No specific wiretapping statute comparable to the US; general privacy principles apply
• Voyeuristic recording: Criminal offense under Penal Code Section 509 (up to 5 years)
• Workplace: No specific legislation; employer notification expected
• Distribution of footage: Section 233 CMA 1998 provides additional penalties for online distribution

---

Hong Kong

Hong Kong's privacy framework is built primarily around the Personal Data (Privacy) Ordinance (Cap 589) and supplemented by common law privacy principles.

Personal Data (Privacy) Ordinance (Cap 589)

The PDPO is Hong Kong's primary data protection legislation and has been in force since 1996. Key provisions relevant to surveillance:

• Data Protection Principle 1 (Purpose and Collection): Personal data must be collected for a lawful purpose directly related to a function of the data user, and the collection must be necessary for that purpose.
• Data Protection Principle 3 (Use): Personal data must only be used for the purpose for which it was collected, or a directly related purpose.
• Section 64 (Domestic Exemption): The Ordinance does not apply to personal data held by an individual for the purposes of recreation, managing personal, family, or household affairs, or any other domestic purpose. Home security cameras fall within this exemption.

The Office of the Privacy Commissioner for Personal Data (PCPD) is the enforcement body. The PCPD has published guidance on CCTV use in common areas of residential buildings, establishing that:

• Building management companies installing CCTV must comply with the PDPO
• Footage retention should be limited (typically 7–14 days)
• Signage should indicate the presence of CCTV

Criminal Offenses

Hong Kong lacks a specific voyeurism statute comparable to the UK's 2019 Act, though legislative reform has been discussed. Current criminal provisions include:

• Crimes Ordinance (Cap 200), Section 159AA: Access to computer with criminal or dishonest intent — has been applied to hacking into cameras
• Summary Offences Ordinance (Cap 228), Section 4: Loitering with intent — sometimes applied in peeping Tom cases
• Common law voyeurism: The courts have recognized voyeurism as a form of outraging public decency, a common law offense carrying imprisonment

In 2021, the Hong Kong Law Reform Commission published a report recommending the creation of specific voyeurism offenses. Legislative action has been slow, but the direction of reform is clear.

Intimate Images

The Crimes (Amendment) Ordinance 2021 introduced specific offenses for non-consensual sharing of intimate images:

• Publishing intimate images without consent: up to 5 years imprisonment
• Threatening to publish intimate images: up to 5 years imprisonment

Rental Properties and Subdivided Flats

Hong Kong's dense living arrangements create specific surveillance considerations:

• Subdivided flats (劏房): Recording in a subdivided unit where multiple tenants share common areas raises significant privacy concerns. Consent from all tenants is practically necessary.
• Domestic helpers' quarters: Live-in domestic helpers' bedrooms are private spaces. Recording in these rooms is a serious privacy violation.
• Airbnb/short-term rentals: The PDPO domestic exemption may not apply to commercial short-term rental operations. Disclosure is required.

Practical Summary for Hong Kong

• Video in your own home: Legal under domestic exemption (Cap 589, Section 64)
• Audio recording: No specific wiretapping statute; general privacy principles under PDPO apply
• Voyeuristic recording: Prosecuted under common law outraging public decency; specific legislation pending
• Intimate image sharing: Up to 5 years imprisonment under 2021 Amendment
• Workplace: PDPO requires compliance including notification; PCPD has issued employer guidance
• Enforcement body: PCPD handles complaints and investigations

---

Taiwan

Taiwan's surveillance law framework combines Constitutional privacy protections, specific Criminal Code provisions, and the Personal Data Protection Act (PDPA).

Criminal Code Article 315-1 (刑法第315-1條)

This is the primary statute governing covert recording in Taiwan:

Article 315-1: A person who commits any of the following acts without reason shall be sentenced to imprisonment for not more than 3 years, short-term imprisonment, or a fine of not more than NT$300,000:

1. Secretly viewing, recording, or eavesdropping on another person's non-public activities, speech, conversation, or body through the use of equipment or devices
2. Recording or eavesdropping on another person's non-public activities, speech, conversation, or body, knowing that it is done through equipment or devices installed by others without authorization

Key elements:

• "Non-public activities" — activities conducted in a place where the person has a reasonable expectation of privacy
• "Without reason" (無故) — the element that distinguishes lawful from unlawful recording. Recording with legitimate reason (home security, evidence of crime) may be defended; voyeuristic recording has no legitimate reason
• The penalty of up to 3 years imprisonment is significant by regional standards

Article 315-2 (刑法第315-2條)

Addresses the distribution of materials obtained through unlawful surveillance:

• Manufacturing, distributing, broadcasting, or selling recordings obtained in violation of Article 315-1
• Penalty: up to 5 years imprisonment and fine

Personal Data Protection Act (個人資料保護法)

Taiwan's PDPA governs the collection, processing, and use of personal data:

• Article 19: Non-government agencies may collect personal data only within the scope of specific purposes and where the data subject's rights are not infringed
• Article 51 (Domestic Exemption): The Act does not apply to personal data collected by natural persons for personal or household activities. Home security cameras fall within this exemption.
• Enforcement: The National Development Council oversees PDPA compliance

Workplace Surveillance

Taiwan's Labor Standards Act and related regulations address workplace monitoring:

• Employers may install surveillance cameras in the workplace for security and management purposes
• Employees should be notified of monitoring
• Restrooms, changing rooms, and break areas are excluded
• The Council of Labor Affairs has issued interpretive orders establishing that covert workplace monitoring is generally not permissible except in criminal investigations

Special Considerations: Rental Properties

Taiwan's rental market (particularly in Taipei, where housing density is high) has seen several high-profile hidden camera cases in rental properties. The law is clear:

• Landlords cannot install hidden cameras in rental units — this constitutes a violation of Article 315-1
• Tenants who discover hidden cameras should report to police immediately
• Penalties are applied to the person who installed the device, regardless of whether they own the property

Practical Summary for Taiwan

• Video in your own home: Legal under PDPA domestic exemption; Article 315-1 applies to recording others' "non-public activities," which generally excludes monitoring common areas of your own home for security
• Audio recording: Covered by Article 315-1; recording conversations without consent may be criminal
• Voyeuristic recording: Criminal offense under Article 315-1 (up to 3 years imprisonment)
• Distribution of recordings: Article 315-2 adds up to 5 years imprisonment
• Workplace: Permitted with notification; covert monitoring generally prohibited
• Key penalty: Up to 3 years for recording; up to 5 years for distribution

---

Cross-Country Comparison Table

---

General Principles Across All 7 Countries

Despite the jurisdictional differences, several principles hold everywhere:

1. Video monitoring of your own property's common areas for security is legal in all seven countries when done by a private individual for domestic purposes.

2. Recording in spaces with a reasonable expectation of privacy (bathrooms, bedrooms of others, changing rooms) is criminal everywhere. No exceptions.

3. Audio recording is almost always more restricted than video. If you want to avoid legal complications entirely, disable audio recording on your camera. Most cameras allow this in the app settings.

4. Distribution of improperly obtained footage carries separate and often more severe penalties than the initial recording.

5. Workplace surveillance requires some form of employee notification in all seven countries, though the specific requirements vary.

6. Domestic/household exemptions exist in all seven countries' data protection laws, covering personal home security use.

---

FAQ

Is it legal to put a spy camera in my own home?

In all seven countries covered in this guide, video recording in the common areas of your own home (living room, kitchen, hallway) for personal security purposes is legal. Bathrooms, guest bedrooms, and spaces where others have a reasonable expectation of privacy are off-limits. Audio recording has stricter rules that vary by jurisdiction — the safest approach is to disable audio recording if you're unsure.

Do I need to tell my nanny/babysitter about a hidden camera?

In most jurisdictions, you are not legally required to disclose video-only monitoring in common areas of your own home. However, audio recording may require consent depending on your state or country. Many employment law experts recommend disclosure as a best practice — it avoids legal gray areas and sets clear expectations. Some nanny employment contracts include a surveillance disclosure clause.

Can I use spy camera footage as evidence in court?

Generally yes, if the footage was obtained legally. Improperly obtained footage (recorded in violation of applicable surveillance laws) may be inadmissible and could expose you to criminal prosecution. The rules of evidence vary by jurisdiction — consult a lawyer before relying on camera footage for legal proceedings.

What happens if I bring a spy camera when traveling internationally?

The laws of the country you're in apply, not the laws of your home country. A camera that's perfectly legal to use in your US home may be illegal to deploy in a hotel room in Singapore or a rental apartment in Australia. When traveling, assume that recording in any space you don't own is potentially illegal, and verify local laws before deploying a camera.

Which country has the strictest spy camera laws?

Australia (specifically New South Wales) has the most severe penalties — up to 5 years imprisonment for illegal surveillance under the Surveillance Devices Act 2007. The US has the most complex framework due to the federal-state patchwork, with all-party consent states like California, Florida, and Pennsylvania adding significant audio recording restrictions. Taiwan's Criminal Code 315-1 is notable for its broad language covering any recording of "non-public activities" without legitimate reason.