Tree lined university campus path, part of the open environment a university CCTV system covers

CCTV guide

CCTV for universities and campuses

Camera systems that support a safe campus while respecting an open, public environment.

University CCTV is the camera network a university uses to keep students, staff and visitors safe across open campuses, residences, car parks, laboratories and venues. Most Australian public universities are governed by state or territory privacy law rather than the federal Privacy Act, and workplace surveillance laws apply to staff, so a campus system needs a clear purpose, visible signage, controlled access to footage and settled rules for residences, protests and analytics.

  • Which privacy law applies depends on the state: for example, NSW universities fall under the PPIP Act, most Victorian universities under the Privacy and Data Protection Act, and the ANU under the federal Privacy Act.
  • Workplace surveillance laws in NSW and the ACT require 14 days’ written notice to staff, visible cameras and signs at entrances.
  • Campus safety expectations have risen, with a national code on gender-based violence and a National Student Ombudsman.
  • Regulators have taken a hard line on facial recognition, so analytics need a proportionality test before they are switched on.
The rules

What rules apply to university CCTV?

  • Privacy: the NSW Information and Privacy Commission lists universities among the agencies bound by the Privacy and Personal Information Protection Act 1998.1 The Victorian information commissioner notes that most universities must comply with the Information Privacy Principles in the Privacy and Data Protection Act 2014.2 Queensland universities work under the Information Privacy Act 2009, and the Australian National University, as a Commonwealth agency, is bound by the Privacy Act 1988.
  • Workplace surveillance: in the ACT, the Workplace Privacy Act 2011 requires written notice at least 14 days before surveillance starts, clearly visible cameras and signs at each entrance, and bans surveillance in toilets, change rooms, prayer rooms and first-aid rooms.3 NSW has similar notice and signage rules.
  • Safe environments: the National Higher Education Code to Prevent and Respond to Gender-based Violence, which applies to universities from 01/01/2026, includes a standard on safe environments and systems, and the Higher Education Standards Framework requires a safe environment to be promoted on campus.4 Neither prescribes cameras, but both raise the bar for how a university plans campus safety.
Good practice

What does a well run campus CCTV system look like?

Published university CCTV policies share a common core, which is a sound baseline:

  • a stated purpose limited to safety, security and incident investigation;
  • visible cameras and signs at entry points, with no hidden cameras;
  • a set retention period, commonly around 28 to 31 days, extended only for investigations;
  • individual logins and audit trails, with release of footage to police through a formal request;
  • clear rules for student residences, where expectations of privacy are higher; and
  • a decision process for analytics and facial recognition that tests necessity and proportionality before any use.

On facial recognition, the Privacy Commissioner found in 2025 that a national retailer’s use of the technology was unlawful because the privacy impact outweighed the benefit.5 That reasoning is a useful guide for any campus considering similar tools.

How we help

How Agilient supports university CCTV

Agilient provides independent CCTV consulting for universities and education providers: campus camera strategy, coverage and privacy reviews, analytics assessments, specifications and tender support. Agilient does not sell or install cameras. Its broader education security work covers access control, residences and crowded campus events, and the CCTV upgrade guide explains how to modernise an ageing network in stages.

Other CCTV sector guides: childcare centres, schools, aged care, hospitals, councils, stadiums and venues, racing and critical infrastructure.

Planning a campus CCTV review?

A short briefing will help you test your camera network against privacy, safety and upgrade needs.

FAQs

University CCTV FAQs

Does the Privacy Act apply to university CCTV?
For most public universities, no. They are generally governed by state or territory privacy law, such as the NSW PPIP Act or the Victorian Privacy and Data Protection Act. The Australian National University is a Commonwealth agency and is bound by the Privacy Act 1988.
Do universities need to notify staff about CCTV?
Yes, in NSW and the ACT. Workplace surveillance laws there require written notice to staff at least 14 days before camera surveillance starts, clearly visible cameras and signs at entrances.
Can universities use facial recognition on campus?
Only after careful assessment. Regulators treat facial images used for identification as sensitive information, and the Privacy Commissioner has found retail uses of facial recognition unlawful where the privacy impact outweighed the benefit. A privacy impact assessment and a proportionality test should come first.
How long do universities keep CCTV footage?
Published university policies commonly set retention at around 28 to 31 days, with longer retention only for investigations or police requests. The period should be written into policy and applied consistently.
References

  1. Information and Privacy Commission NSW, Privacy and Personal Information Protection Act 1998, ipc.nsw.gov.au
  2. Office of the Victorian Information Commissioner, Examination of privacy and information security policies of Victorian universities, ovic.vic.gov.au
  3. ACT Legislation Register, Workplace Privacy Act 2011, legislation.act.gov.au
  4. Department of Education, National Higher Education Code to Prevent and Respond to Gender-based Violence, education.gov.au
  5. Office of the Australian Information Commissioner, Kmart facial recognition determination, oaic.gov.au