In the UK, it is not explicitly illegal to install CCTV in school toilets, but it is highly regulated and generally discouraged as a "last resort." Under the Data Protection Act 2018 and UK GDPR, schools must prove that the use of cameras in such a private area is proportionate and necessary to address serious issues like persistent bullying, vandalism, or drug use that cannot be resolved through other means. In 2026, the Information Commissioner's Office (ICO) guidelines mandate that cameras should strictly be positioned to monitor communal areas (like the sinks) and never directed toward cubicles or urinals. Schools are required to conduct a rigorous Data Protection Impact Assessment (DPIA), consult with parents and students, and display clear signage. Any covert recording or recording that violates the "reasonable expectation of privacy" in intimate areas could lead to severe legal penalties for the school, including significant fines and criminal charges related to voyeurism if the footage is misused.