Security Cameras and Texas Privacy Law: What You Can Record and Where You Need a Sign

December 15th, 2026

Security cameras are ordinary equipment for a Texas business. They watch the entrance, the register, the stockroom, and the parking lot. Most owners assume the legal side is equally ordinary: post a sign, avoid the restrooms, and the job is done. The reality is that several different Texas laws can apply to the same camera, and the sign that feels like a legal shield does less than many people think.

This article explains what Texas law generally allows a business to record, where recording is prohibited, and where a sign is required, recommended, or useless. It is general information, not legal advice. Camera placement, audio capability, facial recognition, employee monitoring, and industry rules all depend on the specific business, so the final decisions should involve qualified Texas counsel.

The Short Answer on Signs

Texas does not have a statewide statute that requires a business to post a video surveillance sign for ordinary video-only cameras in areas where people do not have a reasonable expectation of privacy. A retail store, office, warehouse, or parking lot can generally record video without a notice sign under Texas state law.

That does not mean signs are pointless, and it does not mean every camera is lawful. A sign is still the right practice for most businesses because it gives notice, discourages crime, and makes it harder for someone to claim they expected privacy in a public area of the premises. But a sign cannot do three things: it cannot make recording in a restroom or changing room lawful, it cannot replace the consent required for audio interception, and it cannot substitute for the notice and written consent required when a camera system captures facial geometry for identification.

What Texas Law Generally Allows

Texas does not have one comprehensive camera statute. The rules come from several places: the Penal Code, the Business and Commerce Code, the Civil Practice and Remedies Code, federal law, and whatever lease, local ordinance, or industry regulation applies to the property.

For video-only recording, the general rule is that a business may record in areas that are part of its premises and open to ordinary use. Common examples include:

• Entrances, exits, and lobbies.
• Sales floors, checkout counters, and cash-handling areas.
• Stockrooms, loading docks, and equipment rooms.
• Parking lots and exterior areas controlled by the business.
• Common work areas such as offices, warehouses, and break rooms, subject to employment law limits.

Video in those areas does not normally require consent or a notice sign under Texas state law. The camera should still be placed for a legitimate security purpose, not to peer into a private space or harass a particular person.

Where Recording Is Prohibited

Texas Penal Code § 21.15 makes invasive visual recording a crime. The statute covers recording another person in a bathroom or changing room without consent and with intent to invade privacy. A 2025 amendment, HB 1465, replaced that location language with a place in which a person has a reasonable expectation of privacy, which includes a bathroom, bedroom, and changing room. The change took effect on September 1, 2025. The offense remains a state jail felony, and a conviction can now trigger sex offender registration.

For a business, the practical list of off-limits areas includes restrooms, locker rooms, dressing and fitting rooms, lactation rooms, hotel guest rooms, patient exam rooms where people undress, and any other space where a reasonable person would expect to disrobe or be private. A sign does not fix a camera in one of those places. The statute requires consent, and a posted notice is not a substitute for the consent of the person being recorded.

Camera angles matter as much as camera location. A camera in a stockroom that happens to see into a changing area, a camera aimed through a window into a neighboring apartment, or a zoom lens pointed at a private space can create liability even if the camera itself is mounted on the business's own property. The intent behind the placement is part of the legal analysis, so the business should be able to explain why each camera points where it does.

Audio Is a Separate Rule

Most of the confusion about camera law comes from audio. A camera that records video is treated differently from a camera that also records sound. Texas Penal Code § 16.02 governs the interception of oral communications. Texas is a one-party consent state: a person may record a conversation if they are a party to it or if one party consents.

For a business, that means recording a customer service call is generally lawful when the business is a party to the call. Texas does not require a recorded-call notice for that kind of recording, although notice is still good practice and may be required by another state's law if the caller is located in an all-party consent state. The analysis changes for a camera with a microphone that picks up conversations between other people. If no party to the conversation consents, recording it can be a state jail felony and can expose the business to civil damages.

Many businesses solve this by disabling audio on security cameras entirely. If audio is necessary, the business should post clear notice, document consent where possible, and limit recording to areas and conversations where the business has a legitimate role. A sign helps establish notice, but it does not make it lawful to intercept a conversation that no one consented to record.

Facial Recognition and Biometric Data

A camera that merely records video is not automatically a biometric system. A camera connected to facial recognition software that creates a record of face geometry is different. Texas Business and Commerce Code § 503.001, the Capture or Use of Biometric Identifier Act (CUBI), requires a business to inform a person and obtain consent before capturing a biometric identifier for a commercial purpose.

CUBI covers retina or iris scans, fingerprints, voiceprints, and records of hand or face geometry. It limits sale and disclosure of biometric identifiers, requires reasonable care in storage, and requires destruction within a reasonable time and no later than one year after the purpose for collecting the data expires. The Texas Attorney General enforces the law, with civil penalties of up to $25,000 per violation. A 2025 amendment, part of the Texas Responsible Artificial Intelligence Governance Act, clarified that CUBI applies to AI systems and added related duties effective January 1, 2026.

A sign is not enough for facial recognition. The business needs a notice and consent process before capture, a written policy, a retention schedule, and a vendor contract that addresses security and deletion. If the system identifies employees, customers, or visitors, the business should treat it as a high-risk program and have counsel review it before deployment.

The Texas Data Privacy and Security Act can also apply. Video footage that is linked or reasonably linkable to an identified or identifiable person can be personal data, and the TDPSA does not list a general security-camera exception. A covered business should describe camera processing in its privacy notice, limit collection to what it needs, set retention rules, and apply the same vendor and security requirements it uses for other personal data. Small businesses receive significant relief under the TDPSA, but the analysis depends on the business and the data involved.

Where a Sign Is Required or Strongly Recommended

Ordinary video-only cameras

Texas does not require a sign. Posting one is still recommended at entrances and in parking areas. It gives notice, supports a security purpose, and reduces the chance that a visitor claims a reasonable expectation of privacy in a public area.

Audio-enabled cameras

Texas does not require a specific sign for audio recording in every case, but notice is the practical way to show that callers and visitors were informed. If the business relies on consent, the notice should be clear and the consent should be documented. The sign does not replace the one-party consent rule, and it does not authorize recording a conversation between third parties who did not consent.

Facial recognition and biometrics

CUBI requires notice and consent before capture. A sign can be part of the notice, but it is not a substitute for the consent process. The business should also have a written policy, a retention schedule, and a vendor agreement.

Restrooms, changing rooms, and other private areas

No sign makes recording lawful in these areas. The camera should not be there at all.

Employees

Texas does not require an employer to post a notice for video-only surveillance in common work areas, but a written policy and visible notice are still good practice. Employees should know what is monitored, why, and how long footage is kept. In a unionized workplace, installing cameras can be a mandatory subject of bargaining. Cameras should not be used to monitor protected concerted activity, such as union organizing or discussions about pay and working conditions, and break rooms and cafeterias deserve extra caution.

Industry rules, leases, and local ordinances

Specific businesses can have additional duties. Health care providers handle protected health information and may need business associate agreements with camera and storage vendors. Alcohol-licensed premises, childcare facilities, schools, financial institutions, and parking operators may face industry or municipal rules. A lease can require landlord approval or restrict camera placement. An insurer may require cameras or signage as a condition of coverage. These requirements sit on top of Texas law, not instead of it.

What a Useful Sign Should Say

Texas does not prescribe a standard format for a private business camera sign, so the goal is clarity. A useful sign is posted where people can see it before they enter the monitored area and states what is happening in plain language. Depending on the system, it may say:

• "Video surveillance in use."
• "Audio recording in use" when microphones are active.
• The name of the business or operator responsible for the system.
• A contact number for questions about the system or footage.
• A brief statement of the purpose, such as safety and loss prevention.

Use Spanish where the customer base calls for it. Keep the sign accurate. A sign that claims audio is not recorded when the cameras have live microphones is worse than no sign at all, because it creates a false sense of compliance.

Retention, Access, and Requests for Footage

A camera system creates a record, and records need rules. Decide how long footage is kept and why. Many businesses use a short retention window, such as 30 to 90 days, unless an incident or legal hold requires preservation. Keeping footage forever increases storage cost, privacy risk, and the burden of responding to requests.

Access should be limited to people who need it, protected by multi-factor authentication, and logged. Exports should be documented so the business can show who copied footage and when. If police, a customer, or a lawyer asks for video, route the request through management and counsel. A subpoena or litigation hold changes the preservation obligation, and deleting footage after a request can create serious problems.

Camera systems also need basic cybersecurity. Default passwords, exposed recorders, and unpatched firmware are common ways footage leaks. Put cameras and recorders on a segmented network, change default credentials, apply firmware updates, and review who has remote access.

Use a Licensed Camera Company

Texas regulates camera installation. Under Occupations Code Chapter 1702, a business that sells, installs, services, or monitors closed-circuit television or still camera systems for the public generally needs a security services contractor license, and individual camera systems installers need the appropriate registration. There are exemptions, including some do-it-yourself and owner-installed work, but a business hiring a contractor should confirm the license rather than assume it.

A licensed installer is also more likely to document camera placement, retain the installation records, and understand the difference between a video-only system and one that captures audio or biometric data.

A Practical Camera Compliance Checklist

1. Map every camera. Record the location, direction, field of view, audio capability, and purpose of each device.
2. Mark private areas. Confirm no camera views a restroom, changing room, lactation room, exam room, or other private space. Check adjacent views and zoom ranges.
3. Disable audio unless it is necessary. If audio is used, post notice, document consent, and review the one-party consent rule with counsel.
4. Review facial recognition separately. Treat any face-geometry system as a CUBI program with notice, consent, retention, and vendor terms.
5. Post clear signs. Put notices at entrances and monitored areas. Include audio notice where microphones are active.
6. Adopt an employee policy. Explain what is monitored, why, who can access footage, and how long it is kept. Address union and protected-activity limits where they apply.
7. Set retention and access rules. Delete footage on schedule, limit access, require multi-factor authentication, and log exports.
8. Secure the system. Segment cameras from the business network, change default passwords, patch firmware, and review remote access.
9. Review vendor contracts. Confirm ownership of footage, retention and deletion terms, breach notice, security requirements, and whether a business associate agreement is needed.
10. Document decisions. Keep camera maps, policies, sign photos, vendor reviews, and legal guidance where they can be produced if a question arises.

How HTS Can Help

Camera placement, recording settings, network segmentation, and access control are technical decisions with legal consequences. As a Texas DPS-licensed security contractor (License #B20729), HTS Voice & Data Systems designs and installs video surveillance and access control systems for businesses across Central and South Texas. We can review an existing system, document camera views, disable unnecessary audio, secure recorders, and help the business keep its signage and retention practices consistent with its policy.

If you are adding cameras, expanding a system, or reviewing what your current recorders capture, call (210) 495-5520 or contact us to schedule a site review.

Posted in: Video Surveillance