Workplace CCTV laws in Queensland are not written in one place. Unlike New South Wales, Victoria and the ACT, Queensland has no dedicated workplace surveillance act, so what you can and cannot record on your own premises is governed by several laws stacked together: the Invasion of Privacy Act 1971 (Qld) for audio, the Criminal Code (Qld) for cameras in private places, and, for many businesses, the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This guide translates those CCTV laws in QLD into plain terms for a business owner fitting cameras to a shop, office, warehouse or clinic.
This is general information, not legal advice. Every site is different. Confirm your specific obligations with a qualified lawyer or the Office of the Australian Information Commissioner (OAIC) before you rely on anything here.
The short version
Filming your own workplace for security is generally allowed in Queensland. The traps are specific, not general: you cannot point a camera into a place where a person reasonably expects privacy, recording audio is far more restricted than recording video, and if your business is covered by the Privacy Act you have real duties around telling people, securing the footage and getting rid of it when it is no longer needed. Nail those four points and a standard security system is on solid ground.
Which laws actually apply in Queensland
There is no “Queensland CCTV Act”. Instead, three separate laws do the work, and each covers a different slice.
| Law | What it covers | Who it applies to |
|---|---|---|
| Invasion of Privacy Act 1971 (Qld) | Listening devices and the recording of private conversations, which is the audio side of CCTV | Everyone in Queensland |
| Criminal Code (Qld), section 227A | Observing or visually recording a person without consent while they are in a private place or doing a private act | Everyone in Queensland |
| Privacy Act 1988 (Cth) and the Australian Privacy Principles | How covered businesses collect, store, use and dispose of footage as personal information | Businesses over the turnover threshold, plus set categories (see below) |
That is why the answer is not simple. A camera in a car park might be fine under all three, while the same camera with a live microphone, or one pointed at a toilet door, can breach the first two regardless of how big or small your business is.
Queensland is genuinely different here. Other states and territories legislated for the workplace directly.
| State or territory | Dedicated workplace surveillance law | Built-in notice rules |
|---|---|---|
| Queensland | None | No single statute; obligations come from the laws above |
| New South Wales | Workplace Surveillance Act 2005 | Yes |
| Australian Capital Territory | Workplace Privacy Act 2011 | Yes |
If you operate across borders, do not assume a Queensland setup is compliant interstate.
Video versus audio: audio is the tighter rule
This is the most misunderstood point. In Queensland the Invasion of Privacy Act 1971 restricts the use of a listening device to overhear, record or monitor a private conversation. It does not meaningfully regulate optical (video) surveillance, and there is no equivalent state statute that broadly governs where you can point a camera.
The practical upshot: silent video of general work areas sits on much safer ground than audio. Recording what people say is where businesses get into trouble, which is why most compliant commercial CCTV runs with microphones switched off or not fitted at all. If a camera can capture private conversations you are stepping into the Invasion of Privacy Act, and a security benefit rarely justifies that. Muting audio by default is the safe starting point unless there is a clear, lawful reason and proper advice behind it.
Where you cannot put a camera
Video is broadly permitted, but not everywhere. Section 227A of the Criminal Code (Qld) makes it an offence to observe or visually record another person without their consent, in circumstances where a reasonable adult would expect privacy, while that person is in a private place or doing a private act. It carries a maximum penalty of up to 3 years imprisonment.
In workplace terms, that puts these areas off limits, whatever your business size:
- Toilets and bathrooms
- Change rooms and showers
- Lactation and parents rooms
- Any first aid or rest space where someone would reasonably undress or be in a private state
Cover the entrances and general floor if you must, but the inside of these rooms is a hard no. Getting this wrong is not a privacy complaint, it is a criminal offence.
Signage and telling people
There is no standalone Queensland statute that says “you must put up a CCTV sign”, the way the New South Wales workplace act spells out. So the honest answer to “CCTV signage requirements in QLD” is that signage is driven by two things: your duties under the Privacy Act if it covers you, and plain risk management.
If the Privacy Act applies to your business, the OAIC is clear that you must tell people their image may be captured before they are recorded. Visible signage at every entrance is the simplest, most defensible way to meet that. Even if the Privacy Act does not cover you, clear notice does two jobs: it supports the idea that people consented to being filmed, which matters for the audio and private-place rules, and it deters the behaviour you bought the cameras to stop. For staff, tell them in writing before you switch a system on, because consultation up front prevents most disputes later.
Does the Privacy Act cover your business?
The Privacy Act 1988 and the Australian Privacy Principles are where the ongoing obligations live, but they do not apply to every business. The OAIC sets the line at annual turnover: organisations with turnover of more than $3 million are covered, and most small businesses under that figure are not, unless they fall into a listed category.
| Your business | Covered by the Privacy Act 1988? |
|---|---|
| Annual turnover over $3 million | Yes |
| Turnover of $3 million or less, general business | Generally no |
| Health service provider (GP clinic, dental, allied health, pharmacy), any turnover | Yes |
| A business that trades in personal information without consent, any turnover | Yes |
| A contractor delivering a Commonwealth contract, any turnover | Yes |
Note the health line. A small medical or allied health practice is covered no matter how modest its turnover, which is why clinics need to be especially careful with camera placement and footage handling. Worth watching too: the federal government has agreed in principle to remove the small business exemption, but only after consultation and an impact analysis, and no bill has been introduced yet, so a business that is exempt today may not stay that way. If you are close to the threshold, plan as if you will be covered.
Storing, keeping and handing over footage
If the Privacy Act covers you, CCTV footage of identifiable people is personal information, and the Australian Privacy Principles set out how to treat it. In practice that means:
- Keep it secure. Restrict who can view recordings, protect the recorder and any cloud account with real passwords, and log access. A camera system left on default credentials is a breach waiting to happen.
- Do not keep it forever. Hold footage only as long as you genuinely need it, then destroy it or de-identify it. Rolling retention of a set number of days that overwrites automatically is the usual approach.
- Be ready for access requests. Covered businesses can be asked by an individual for the personal information they hold, which can extend to footage of that person, subject to the exceptions in the Act.
One nuance for your own staff: according to the OAIC, CCTV footage of employees that is directly related to their employment can fall under the Privacy Act’s employee records exemption (section 7B(3)), so these duties apply most clearly to footage of customers and visitors.
These are ongoing duties, not one-off setup tasks, which is why CCTV is a responsibility rather than a fit-and-forget purchase.
Reform is on the horizon
Queensland has known its framework is dated. The Attorney-General referred the state’s workplace surveillance laws to the Queensland Law Reform Commission back in 2018, and the QLRC delivered a broader report on civil surveillance and privacy in 2020 recommending a modern surveillance devices framework. The dedicated workplace surveillance review is currently on hold, and the QLRC notes that state and federal reforms may reduce the need for Queensland specific workplace laws. Since 10 June 2025 there is also a statutory tort for serious invasions of privacy, and it applies whatever the size of the business. For now this is the law you operate under, but expect it to change. Build to a higher standard than the bare minimum and you will not have to rip the system out when the rules tighten.
Frequently asked questions
Is CCTV legal in a Queensland workplace?
Yes, in general. Filming your own premises for security is not prohibited by any single Queensland law. The limits are specific: no cameras in places where people reasonably expect privacy, be very cautious with audio, and if the Privacy Act covers your business, meet its rules on notice, security and disposal of footage.
Do I need a sign to have CCTV in Queensland?
There is no standalone Queensland statute forcing a CCTV sign. But if your business is covered by the Privacy Act, the OAIC says you must tell people their image may be captured before recording, and clear signage at entrances is the simplest way to do that. Even when it is not strictly required, visible notice supports consent and deters incidents, so a sign is a good idea on every commercial site.
Can my business record audio with CCTV in Queensland?
Be very careful. The Invasion of Privacy Act 1971 restricts using a listening device to record private conversations, so audio is far more tightly controlled than video. Most compliant commercial systems run with microphones disabled. Do not record audio without a clear lawful reason and proper advice.
Can I put a camera in a staff bathroom or change room?
No. Observing or recording a person without their consent in a toilet, bathroom, change room or similar private space, where a reasonable adult would expect privacy, can be an offence under section 227A of the Criminal Code, carrying up to 3 years imprisonment. Cover the entrance if you need to, never the inside.
Sources
This article is general information, not legal advice. Confirm your obligations with a qualified lawyer or the OAIC.
- Audio and listening device rules in Queensland: Invasion of Privacy Act 1971 (Qld), legislation.qld.gov.au
- Offence of visually recording a person in a private place (section 227A) and the maximum penalty: Criminal Code Act 1899 (Qld), legislation.qld.gov.au
- Which businesses the Privacy Act covers, the $3 million turnover threshold and the categories covered regardless of turnover: Small business, OAIC
- Telling people before recording, keeping footage secure, and destroying or de-identifying it: Security cameras, OAIC
- The Privacy Act does not specifically cover workplace surveillance, and state laws generally govern CCTV: Workplace monitoring and surveillance, OAIC
- Queensland’s workplace surveillance law reform status: Workplace surveillance review, Queensland Law Reform Commission
- Interstate comparison, states with a dedicated workplace surveillance statute: Workplace Privacy Act 2011 (ACT), and the Workplace Surveillance Act 2005 (NSW) on legislation.nsw.gov.au
Cameras from Next Phase Solar
Next Phase Technologies Pty Ltd holds a Queensland security firm licence (No. 4981619), and we put security cameras on homes and small businesses around Mackay. We look at the site before any price, plan where each camera goes with the rules above in mind, and quote after that. See security cameras or call us on (07) 4957 3511.
Last reviewed September 2026. General information only, not legal advice.
