Washington State Video Surveillance Laws: Compliance Guide

Washington State video surveillance laws create a narrow margin for error for security teams. A camera program that works in one setting can create legal risk in another if its placement or settings conflict with privacy expectations. Physical security leaders should review deployments before footage is needed as evidence or creates employee and liability concerns.

Core Statutes and the Reasonable Expectation of Privacy Framework

Compliance reviews of video surveillance in Washington usually start with two statutory sources: a privacy statute and a voyeurism statute. Broader privacy principles also matter because the analysis often turns on whether a person had a reasonable expectation of privacy in the setting being recorded.

The operative statute is the Privacy Act, Chapter 9.73 RCW. It prohibits intercepting or recording private communications without all-party consent, bars illegally obtained recordings from evidence, and establishes both civil and criminal liability. A separate voyeurism statute, RCW 9A.44.115, criminalizes covert recording in spaces where individuals reasonably expect privacy.

For compliance purposes, security teams should assess whether the parties intended the communication to be private and whether that expectation is reasonable given the location, subject matter, and presence of third parties. Silent video surveillance of publicly observable areas sits outside the consent requirements.

Audio Versus Video Recording Rules

Silent video surveillance in publicly observable areas, where people lack a reasonable expectation of privacy, is generally lawful without consent and falls outside RCW 9.73.030. Audio-enabled cameras that capture private conversations are subject to all-party consent, no matter where the camera sits.

RCW 9.73.030 makes it unlawful to record a private conversation without the consent of all persons engaged in it, and consent requires a party to announce in any reasonably effective manner that the conversation is about to be recorded, with the announcement itself also recorded. Narrow statutory exceptions permit one-party consent for emergencies, threats of extortion or bodily harm, harassing calls, and hostage situations, none of which apply to routine commercial or workplace surveillance.

Where Surveillance Is Allowed and Restricted

Video surveillance without audio is generally permitted in locations where individuals do not have a reasonable expectation of privacy. These include building exteriors and parking lots, public lobbies and common areas, store sales floors, and campus grounds.

Cameras must not be placed where individuals reasonably expect privacy. Restrooms, changing rooms, locker rooms, and similar spaces where people may undress are high-risk locations; employee break areas and medical facilities are not routine placements and should receive case-specific legal review. RCW 9A.44.115 defines a place with a reasonable expectation of privacy as either: (1) a place where one may reasonably expect to be safe from casual or hostile intrusion or surveillance, or (2) a place where a reasonable person would believe they could undress without being filmed. First-degree voyeurism, a Class C felony, applies to knowingly viewing, photographing, or filming another for sexual gratification in such a place. It also covers recording intimate areas without consent wherever a person reasonably expects privacy, public or private.

The voyeurism statute exempts corrections and jail personnel recording for security purposes. Private security personnel should not rely on that exemption.

Workplace Surveillance and Employee Privacy

Workplace surveillance in Washington carries a heavy compliance load. The all-party consent requirement applies in the workplace wherever conversations are private, so recording employee conversations without consent exposes employers to both criminal and civil liability.

SHB 1672 adds workplace-monitoring notice requirements and covers several monitoring categories. The law defines electronic monitoring broadly as collecting information about employee activities or communications by any means other than direct, in-person observation, a definition that can cover tools such as keystroke logging, application and URL tracking, email content monitoring, GPS tracking, workspace video surveillance, and webcam monitoring. Security teams should include employer-issued devices, personal devices used for work, and remote-worker deployments when assessing whether monitoring is covered by the law's notice requirements.

Employers must provide individualized written notice to each affected employee at least 15 calendar days before monitoring begins or before any change to existing practices. That notice must describe what is monitored, how, why, who can access the data, and how long it is retained. Employers should not assume generic handbook acknowledgments satisfy this individualized notice requirement without legal review.

SHB 1672 also addresses monitoring employees during off-duty hours on personal devices and restricts AI-based biometric monitoring. Covered AI-based biometric monitoring includes emotion detection, biometric identification, and gait analysis. Enforcement includes a private right of action: applicants or employees may bring a civil action, and a prevailing applicant or employee may recover statutory damages of $100 to $5,000 per violation, plus reasonable attorneys’ fees and costs.

A documented technology-use policy, acknowledged by employees, can help set reasonable expectations and reduce exposure; individualized notice remains required.

Notice and Signage Requirements

For general commercial video surveillance, signage is best treated as one part of a broader notice and compliance program.

In public spaces and workplace deployments, signage can support notice when cameras are visible and notice is posted at conspicuous entry points. Posted signage alone may not constitute legally sufficient consent for audio recording, so teams running audio-enabled systems should obtain a written legal opinion first. Some regulated industries carry their own rules, such as SB 5512 for house-banked card rooms.

Data Privacy, Storage, and Biometric Regulation

Government agencies follow detailed retention schedules, while private-sector security teams should build documented retention policies around litigation hold obligations and applicable statutes of limitations, and restrict footage access to authorized personnel with a documented business purpose.

Biometric deployments trigger separate statutes. The biometric identifiers statute, Chapter 19.375 RCW, enacted in 2017, governs the enrollment, disclosure, and retention of biometric identifiers for commercial purposes and requires notice, consent, or a mechanism to prevent subsequent use before enrollment in a database. It expressly excludes photographs, video, audio recordings, and data generated from them, a carve-out that may require legal analysis for biometric-identification templates built from video images.

Government biometric identification systems fall under Chapter 43.386 RCW, which applies only to state and local agencies.

The My Health My Data Act, Chapter 19.373 RCW, protects consumer health data and biometric data. Ordinary security footage is lower risk, but health-related inferencing should be reviewed against MHMDA's consumer-health-data definition.

Penalties and Legal Risks

Violating RCW 9.73.030 or knowingly altering, erasing, or wrongfully disclosing certain recordings in violation of RCW 9.73.090(1)(c) are classified as gross misdemeanors under RCW 9.73.030 and RCW 9.73.080, respectively, not all violations of Chapter 9.73. Civil exposure under RCW 9.73.060 allows recovery of actual or liquidated damages plus reasonable attorney's fees and court costs.

The evidentiary risk often hurts most in practice. RCW 9.73.050 bars courts from admitting illegally obtained recordings in both criminal and civil cases. Footage captured in violation of the Privacy Act may be unavailable in later criminal or civil proceedings.

Voyeurism penalties under RCW 9A.44.115 scale by degree, from a Class C felony in the first degree to a gross misdemeanor in the second.

Building a Defensible Surveillance Program

Security teams that treat the microphone as the highest-risk component are best positioned to use their footage when it matters most. Programs should disable audio by default, keep cameras out of private spaces, and deliver written notice before workplace monitoring begins. As biometric and behavioral analysis features become standard on commercial hardware, mapping each capability to the right statute before deployment keeps evidence admissible and organizations clear of liability.

A defensible program translates these rules into a repeatable review before cameras are installed, moved, or upgraded. For each deployment, teams should confirm whether the device records audio, whether the viewing angle includes private areas, whether workplace monitoring requires individualized written notice, and whether surveillance is visible to people entering the area. The same review should cover retention, access permissions, and any biometric or health-related analytics. Before expanding or upgrading a system, security teams should recheck those assumptions against current law and the specific way the footage will be collected and used.

Frequently Asked Questions

What are the penalties for recording audio without all-party consent in Washington State under the Privacy Act?

Violations constitute a gross misdemeanor under RCW 9.73.080. Civil liability includes actual damages, subject to statutory minimum amounts, plus reasonable attorney's fees and litigation costs. Courts will exclude illegally obtained recordings from evidence in criminal and civil proceedings under RCW 9.73.050.

How does Washington's SHB 1672 workplace monitoring law affect employers using AI-based biometric surveillance like emotion detection or gait analysis?

SHB 1672 restricts AI-based biometric monitoring including emotion detection and gait analysis, requiring employers to provide individualized written notice fifteen days before deployment. Violations carry private right of action with minimum statutory damages of five hundred dollars per violation.

Can video surveillance footage be used as evidence in court if the recording violated Washington's Privacy Act consent requirements?

No. RCW 9.73.050 explicitly bars courts from admitting illegally obtained recordings in both criminal and civil proceedings, meaning footage captured without required consent is inadmissible regardless of its relevance or probative value to the case.