Massachusetts Video Surveillance Laws: A Compliance Reference for Security Teams

Massachusetts video surveillance laws reward planning. Security teams that think through camera placement, audio settings, and signage before installation tend to stay on the right side of the statutes, while those who rely on defaults often discover the gaps only after a complaint lands. For facilities managers and security directors, compliant deployments come down to how each system is configured and how well it matches the privacy expectations at the site. One overlooked setting can turn a straightforward security project into serious legal exposure.

Core Statutes and the Legal Framework

Several Massachusetts statutes operate together to regulate surveillance.

The Massachusetts Wiretap Act, M.G.L. c. 272, § 99, is the statute most likely to create criminal liability for security operations. It prohibits any person from willfully intercepting a wire or oral communication, where interception means secretly hearing or secretly recording the contents of a communication without prior authority from all parties. The voyeurism statute, M.G.L. c. 272, § 105, governs camera placement by prohibiting the secret surveillance of nude or partially nude individuals and of intimate parts under or around clothing.

The Massachusetts Privacy Act, M.G.L. c. 214, § 1B, gives individuals a right against unreasonable, substantial, or serious interference with privacy. Massachusetts courts apply a balancing test that weighs an employer's legitimate business interests against an employee's reasonable expectation of privacy.

Video Versus Audio Recording

Massachusetts treats silent video differently from audio capture. The Wiretap Act covers wire and oral communications, and its prohibition attaches to the interception of audio content. Audio-disabled video surveillance of non-private areas sits at the lowest end of the risk spectrum.

Audio changes the calculus entirely. When a camera captures sound, even incidentally, it may constitute an interception under § 99.

Under the Massachusetts Wiretap Act, every party to a communication must consent, or have actual knowledge of the recording, before audio is captured. Actual knowledge of the recording suffices even without written consent because secrecy is the operative element.

This creates a practical problem in public-facing spaces. Consent or actual knowledge can be difficult to establish for everyone entering a property, or coming within microphone range, before audio capture begins. Clear notice can reduce the risk that audio recording will be treated as secret, but in commercial environments where visitors may speak before reading any sign, signage alone may be inadequate. The cleanest posture is to disable the audio feature on all cameras.

Where Surveillance Is Allowed and Restricted

M.G.L. c. 272, § 105 and M.G.L. c. 214, § 1B govern camera placement. Cameras may not be placed anywhere individuals hold a reasonable expectation of privacy.

Prohibited locations include:

• Bathrooms, restrooms, showers, and locker rooms.
• Rooms designated for changing clothes.
• Bedrooms and the interiors of tenant-occupied rental units, even where the deploying organization owns the property.

Landlords may install cameras in hallways and building exteriors, but interiors of tenant-occupied units should be treated as private areas where occupants hold a reasonable expectation of privacy. Video-only surveillance is generally lower risk in public and common work areas when tied to legitimate business reasons, in building hallways and exteriors, and in non-private commercial spaces such as lobbies, warehouses, production floors, and parking structures.

Section 105 prohibits secret photography under or around clothing, so camera angles must never capture beneath or around clothing, even in public areas.

Workplace Surveillance and Employee Privacy

Massachusetts courts judge workplace video surveillance through the M.G.L. c. 214, § 1B balancing test. The test weighs the employer's legitimate interest against the employee's reasonable expectation of privacy.

Employers relying on video surveillance should tie monitoring to health, safety, theft prevention, and security purposes, use visible placements where possible, document the business purpose, and manage employee privacy expectations. Employers should notify employees of electronic monitoring in place. Recording in restrooms or changing rooms remains high-risk even with a business justification; cameras should not be placed in such private areas without counsel-confirmed legal authority.

Courts examining a workplace surveillance claim weigh several factors:

• Whether the surveillance was concealed.
• Whether the area was public, enclosed, or under the employee's exclusive control.
• Whether audio was captured or the area was particularly sensitive.
• Whether the surveillance used the least intrusive means meeting a documented need.

Hidden cameras require stronger justification. General security alone should not be treated as enough. The employer should articulate a specific, documented reason.

Workplace audio also requires attention to overlapping state and federal rules. Section 99 contains an exception for an office intercommunication system used in the ordinary course of business, which can apply to certain workplace audio configurations. Federal wiretap law under the ECPA defaults to one-party consent, so satisfying federal requirements does not satisfy the stricter Massachusetts all-party standard.

Notice, Signage, and Consent Requirements

For audio, all-party consent or actual knowledge is mandatory, and a failure is a felony under § 99. Clear notice can supply knowledge that reduces secrecy risk, but the statutes discussed here do not set out a specific video-only signage rule for public-facing areas. Employees should be notified of electronic monitoring, and security teams should adopt a written monitoring policy with a signed acknowledgment in the employee handbook.

Data Privacy, Storage, and Biometric Identification

Two instruments govern surveillance data: the data breach law, M.G.L. c. 93H, and the data security regulation, 201 CMR 17.00. Both turn on a narrow definition of personal information: a resident's name combined with a Social Security number, a driver's license or state ID number, or a financial account number. Standalone video footage falls outside that definition, so video triggers breach notification obligations when linked to those enumerated identifiers.

The Written Information Security Program requirement under 201 CMR 17.00 applies to anyone who owns, licenses, stores, or maintains covered personal information. A WISP must include safeguards appropriate to the business, and its physical safeguard provisions apply to NVR and DVR server rooms and storage systems when they contain records with covered personal information. The regulation also requires limiting data collection to the minimum needed. Whether raw footage of identified individuals independently triggers the full WISP obligation is unresolved, so data minimization remains the sound default.

These Massachusetts surveillance and data-security statutes do not establish a general private-sector retention period for surveillance footage. Retention policies should be built around data minimization and sector-specific regulations. They should also account for litigation hold obligations when footage may be relevant to an anticipated legal matter.

For biometric identification, security directors should treat deployment as a separate legal review item rather than assuming general video-surveillance rules resolve every issue.

Penalties and Legal Risk

Unlawful audio interception under the Wiretap Act is a felony carrying substantial fines and multi-year imprisonment. Disclosing or using illegally intercepted communications is a separate offense carrying its own fines and potential imprisonment. Voyeurism under Section 105 is also punishable by significant fines and incarceration, with steeper penalties where a minor is involved.

Civil exposure can outpace the criminal fines. Under Section 99(Q), an aggrieved person may recover statutory damages of at least $100 per day of violation plus punitive damages and attorney fees. Unlawfully intercepted communications can also be suppressed in criminal proceedings.

Building a Defensible Compliance Posture

Several major Massachusetts surveillance restrictions turn on secrecy or reasonable expectations of privacy, which makes transparency a central compliance lever. Disabling audio removes the categorical risk under § 99. Keeping cameras visible and posting clear notice converts a covert deployment into a more defensible one. Documenting the business reason behind each placement supports the same goal.

For requirements in other jurisdictions, compare video surveillance laws by state.

Frequently Asked Questions

Can I use security cameras with audio recording in Massachusetts if I post visible signage warning people they are being recorded?

Visible signage reduces secrecy risk but does not guarantee compliance. Massachusetts requires all-party consent or actual knowledge before audio capture, and visitors may speak before reading signs. Transient foot traffic makes proving actual knowledge difficult, leaving legal exposure.

What are the penalties for violating the Massachusetts Wiretap Act with security camera audio recording?

Violating the Wiretap Act constitutes a felony with substantial fines and imprisonment. Each separate disclosure or use triggers its own penalty. Civil damages start at one hundred dollars per day, plus punitive awards and attorney fees.

Are landlords in Massachusetts allowed to install security cameras in common areas like hallways and parking lots?

Yes. Massachusetts law permits landlords to install cameras in hallways and building exteriors because tenants have no reasonable expectation of privacy in shared common areas, unlike inside their rented units where surveillance remains prohibited.