Texas Video Surveillance Laws: A Compliance Reference for Security Teams

Texas video surveillance compliance can look straightforward until a routine camera deployment raises a separate legal issue. In Texas, the same system may need review based on where it is used, what it captures, and how recorded information is handled after collection. For security teams, compliance depends on identifying those issues before a camera goes live.

The Video and Audio Distinction Under Texas Law

For Texas video surveillance compliance, the first question is often whether a system records only images or also captures spoken conversations.

Video-only surveillance in areas where people lack a reasonable expectation of privacy faces minimal statutory restrictions. Texas Penal Code §21.15 governs certain invasive visual recordings and generally requires lack of consent and an intent to invade privacy. Ordinary video recording in public or other areas where there is no reasonable expectation of privacy falls outside that criminal prohibition. For most security teams, that makes the first compliance question a technical one: whether the system records only images or also captures spoken conversations.

A system that adds audio raises issues outside the core video-surveillance analysis. For teams evaluating camera deployments under Texas video rules, the main compliance focus remains where the camera is placed, what it records, and how recorded information is handled after collection.

Where Cameras Are Prohibited and Permitted Under Texas Law

Absolute Prohibitions

Texas Penal Code §21.15 prohibits visual recording in bathrooms and changing rooms—including locker rooms and swimwear changing areas—without the other person's consent and with intent to invade privacy. The statute names these locations explicitly, and Section 21.15(e) states that posted signs indicating an area is under surveillance do not by themselves establish consent to visual recording in that area, including bathrooms or changing areas where the statute applies.

A camera positioned so its field of view captures the interior of a prohibited area, even from an adjacent hallway, can implicate §21.15 based on the recorded coverage, regardless of where the camera is physically mounted. For compliance purposes, that makes camera angle and recorded coverage just as important as where the camera is installed.

Restricted Locations

Workplace spaces where employees have a stronger expectation of privacy can create more risk than common areas or areas in plain view of others. Written workplace surveillance policies and a documented business purpose may help reduce disputes, but some locations may fall outside the criminal prohibition and still create civil exposure.

Common areas such as lobbies, parking structures, hallways, retail floors, and loading docks generally present lower privacy risk than enclosed or personal spaces. Those locations remain the lowest-risk placements because they avoid both the explicit statutory bans and the strongest privacy expectations.

Texas Workplace Surveillance Considerations

Texas workplace guidance leaves workplace video camera compliance to the interaction of Penal Code prohibitions, common-law privacy torts, and TWC administrative guidance. Internal policy often becomes the main control for reducing disputes and showing a legitimate business purpose.

For video-only systems, employers may install cameras within work premises to record activities of employees, customers, and clients. Civil risk can remain even for video-only recording that has no statutory notice requirement. That means an employer can satisfy the basic statutory rule for video while still creating risk if monitoring reaches spaces where employees reasonably expect privacy.

Written policy that explicitly addresses what areas are subject to monitoring is a primary risk-reduction tool against invasion of privacy claims. Employee-area analysis turns on context, control, and how clearly the employer defines access and monitoring practices.

Notice and Signage Requirements in Texas

Signage obligations depend on system capabilities. Signage obligations change based on what the system captures and how the data is used.

Video-only commercial surveillance has no comparable statewide notice rule. Even so, written policies still matter because they help define business purpose, employee expectations, and the scope of monitoring in areas that may otherwise create civil privacy arguments.

At the municipal level, Houston requires camera installation for bars, nightclubs, sexually-oriented businesses, convenience stores, and game rooms. Security integrators installing or servicing camera systems must hold a Texas Private Security Bureau license under Occupations Code Ch. 1702.

Statewide compliance is only part of the analysis: business type, city requirements, and installer licensing can each create separate operational obligations.

Texas Data Privacy and Storage Obligations

Texas data privacy statutes can create handling obligations that layer on top of camera placement rules. A lawful installation is only the first step. Once footage is tied to identifiable individuals, badge activity, or biometric data, the analysis shifts from where the camera sits to how the resulting information is stored, disclosed, and destroyed.

ITEPA

Bus. & Com. Code Ch. 521 may become relevant when stored surveillance data is combined with other identifying information. For security programs that integrate video with access control records, the combined dataset can raise issues unique to integrated systems.

CUBI

Bus. & Com. Code Ch. 503 applies when a person captures biometric identifiers for a commercial purpose, including records of face geometry. CUBI requires prior notice and consent before capture, restricts disclosure, and mandates destruction after the collection purpose expires. A security exemption appears to cover biometric identifiers captured for public safety or security contexts, but I could not verify a specific rule that systems used for additional non-security functions require separate review. That distinction matters because a single deployment may serve both security and non-security functions.

TDPSA

Bus. & Com. Code Ch. 541 can become relevant to personal data. Biometric data used to identify a person is generally treated as sensitive data and may trigger additional compliance obligations, such as consent and certain sale-related notices. Texas has no general statute mandating a specific retention period for private-sector video footage. The retention question therefore depends on whether other laws governing biometric data, personal data, or breach response apply to the stored material.

Penalties and Enforcement Under Texas Law

Violations of §21.15 can carry criminal penalties.

Civil liability under Texas Civil Practice & Remedies Code Ch. 123 provides a private cause of action for unlawful interception, with statutory damages, actual damages above that amount, punitive damages, and attorney's fees. For employers and multi-site operators, that structure can increase civil exposure when a surveillance deployment creates a separate interception issue.

Federal Overlays for Regulated Industries

Federal law can add separate obligations in regulated sectors. For regulated organizations, federal rules attached to the setting in which recording occurs may add obligations beyond Texas compliance.

Building a Compliant Texas Surveillance Program

Texas compliance is strongest when teams review each deployment as a combined placement, capture, and data-governance decision. A camera that is lawful in one respect can still create separate obligations in another. Clear policies and current legal review remain practical controls for keeping surveillance programs aligned with Texas law.

Keeping Texas Video Surveillance Review Practical

Texas video surveillance compliance turns on details that are easy to miss during routine deployment. Teams that review placement, privacy expectations, and downstream data handling together are better positioned to reduce legal risk and operational rework.

Frequently Asked Questions

What are the specific consent and notice requirements under Texas CUBI law for security cameras that use facial recognition or biometric identification?

CUBI requires notice and consent before capturing biometric identifiers for a commercial purpose, including face geometry that may be captured through security cameras using facial recognition or similar technology. Notice must disclose the biometric identifier collected, the purpose of collection, how it will be used, and how long it will be retained. Consent must be in writing or in electronic form and may be retained by the person collecting the data.

Can an employer in Texas legally install video surveillance cameras in break rooms, private offices, or other semi-private workplace areas without notifying employees?

Texas law permits video-only cameras in break rooms and private offices if no reasonable privacy expectation exists, but written workplace policies documenting business purpose and monitored areas significantly reduce civil liability exposure even when no statutory notice obligation applies.

How should Texas security teams handle video footage retention and destruction when recordings are integrated with access control or biometric data?

Establish retention schedules by data type, destroy biometric data promptly after its security purpose ends per CUBI requirements, and document deletion protocols. Maintain audit logs showing when integrated datasets were purged to demonstrate compliance.