Summary: Before you release security-camera footage, the key question is who's receiving it - police, a person caught on camera, an insurer or vendor, or the public. Each has a different legal basis and a different redaction expectation, and in almost every case you must obscure uninvolved third parties. Gallio PRO automatically blurs faces and license plates across your footage and gives you a built-in editor to hide anything else (badges, documents, screens) by hand - so you can answer the request while protecting bystanders. It runs on your own machine and keeps no logs. Download the free demo to try it on your own clips.
Surveillance is everywhere, and so is the temptation to forward a clip to the police, post it to a neighborhood group, or hand it to an insurer. Doing that without redacting the people who aren't the point of the footage is where organizations get into trouble. This guide is US-first, with the EU/UK position alongside, and it's organized around the decision that actually matters: the recipient.
The legal basis and the redaction expectation change with the recipient. Use this as your starting matrix.
There's no federal GDPR-equivalent for surveillance in the US. Instead, several frameworks apply depending on what you're doing:
For US public-sector context, see the DHS Best Practices for Privacy and Civil Liberties Considerations in the Use of Camera Systems (2020).
Under the GDPR, individuals retain privacy expectations even in public spaces captured by cameras (confirmed by the CJEU in Ryneš, C-212/13). Before sharing, you need a lawful basis, and the data-minimisation principle (Art. 5(1)(c)) means redacting people who aren't the purpose of the disclosure. The EDPB's Guidelines 3/2019 on video devices are the reference framework; an access request under Art. 15 must be balanced against the privacy rights of others in the same footage - which in practice means blurring them.
Prefer to watch? See the full step-by-step video tutorial.
See how Gallio PRO fits high-volume redaction workflows.
Footage with audio. Audio carries stricter consent rules than video. Confirm you had the right to record it before sharing; if not, the safest path is to remove or not disclose the audio.
Home and doorbell cameras. Homeowners face lighter regulation than businesses, but sharing isn't unrestricted. If a doorbell camera captures a public sidewalk or a neighbor's property, blur passersby before posting to social media or a neighborhood app.
Covert / hidden cameras. Footage from covert recording is high-risk. Verify you had a legitimate basis for the recording itself before sharing anything, and apply stronger redaction than usual.
Criminal activity. Tempting to post, but the privacy of uninvolved bystanders still applies. Share with law enforcement first; if public posting is genuinely necessary, release a version with everyone but the relevant party redacted.
In the EU/UK, improper disclosure can mean complaints to a supervisory authority and fines up to €20 million or 4% of global annual turnover (GDPR Art. 83). In the US, the exposure runs through privacy/civil suits, state-law penalties (e.g. BIPA's private right of action in Illinois), and contractual or reputational fallout. There's also an evidentiary risk: footage shared or obtained improperly can be challenged or excluded in proceedings, undermining the very reason you kept it.
Choosing a tool to redact your footage? Get our free one-page checklist: 10 things to check before you trust a tool with faces and license plates, including where your footage actually goes and whether the redaction is truly irreversible. Get the checklist here.
The privacy of uninvolved bystanders still applies. Share with law enforcement first; if you post publicly, redact everyone who isn't the relevant party.
Yes. You can release footage showing the requester, but you must blur other identifiable individuals first - under GDPR Art. 15 and US state access rights alike.
In one-party states, recording is lawful if one participant consents (which can be you). In all-party states, everyone recorded must agree. It mainly affects audio captured by surveillance systems.
Yes. It automatically detects and blurs faces and license plates across the footage and tracks them as subjects move; you can choose which detections to keep visible.
No to both. Gallio PRO processes recorded video files, not real-time or live streams, and it works on the visual layer (faces and plates automatically, other elements manually) - it does not redact audio.
Tie retention to the system's purpose - commonly 30–90 days - unless there's a specific reason (such as an active investigation) to keep it longer.
