CCTV Redaction Software — Blur Faces in Security Footage - PiiBlur
Surveillance

Share CCTV footage without sharing personal data

Automatically blur faces and license plates in security camera footage before sharing with law enforcement, insurers, or in DSAR responses.

See it in action

Drag the slider to compare original and redacted output.

Original unprocessed photo
Original
Photo with PII automatically redacted by PiiBlur
Redacted
+9 more

The compliance challenge

Every DSAR requires redacted footage

Data Subject Access Requests (DSARs) require you to provide footage of the requester — but redact every other identifiable person in it. GDPR gives you 30 days to respond. Manual redaction of multi-camera footage can take weeks.

Sharing footage means sharing personal data

Sharing CCTV footage with police, insurers, or building management means sharing the personal data of every person captured on camera. Without redaction, each share is a potential GDPR or CCPA violation.

Dozens of cameras, continuous recording

Large facilities, retail spaces, and parking structures operate dozens of cameras recording continuously. Redacting footage from even a single incident across multiple camera angles is a significant manual effort.


How PiiBlur helps

Automatic face blurring

Blur all faces in CCTV and security camera footage automatically. Process footage from fixed cameras, PTZ cameras, and multi-angle setups.

Plate and badge redaction

Redact license plates in parking lot and entrance feeds. Detect and blur ID badges, name tags, and credentials on individuals in facility footage.

API integration with your VMS

Process footage via the REST API and integrate into your existing video management system. Automate redaction as part of your DSAR response or evidence sharing workflow.


Compliance context

GDPR

CCTV footage is personal data under GDPR. Data controllers must respond to DSARs within 30 days, providing requested footage with third-party identities redacted. Failure to comply risks significant regulatory fines.

UK CCTV Code of Practice

The UK Surveillance Camera Commissioner's Code of Practice requires that CCTV operators handle footage as personal data and respond to subject access requests with appropriate redaction of third parties.

This is general information, not legal advice. Consult a qualified professional for compliance guidance specific to your situation.


Frequently asked questions

Do I need to blur faces in CCTV footage before sharing it?
In most cases, yes. Under GDPR and CCPA, CCTV footage containing identifiable individuals is personal data. Sharing unredacted footage with third parties — police, insurers, or building management — without a lawful basis for each individual is a compliance violation. Blurring uninvolved parties before sharing is the safest approach.
How do I respond to a DSAR for CCTV footage?
A DSAR requires you to provide the requester's footage within 30 days under GDPR. You must redact all other identifiable individuals in the footage before handing it over. PiiBlur automates this — upload the footage, blur all faces, and deliver the redacted version.
Can PiiBlur process footage from multiple camera angles?
Yes. Upload footage from any camera — fixed, PTZ, dome, or multi-angle setups. PiiBlur processes each file independently, detecting and blurring faces and plates regardless of camera position or angle.
How quickly can PiiBlur process CCTV footage?
Processing time depends on video length and resolution. Videos up to 10 minutes per file are supported. For DSAR responses involving multiple clips, use the API to process several files in parallel and meet your 30-day deadline.
What are the GDPR penalties for sharing unredacted CCTV footage?
GDPR violations related to CCTV handling have resulted in significant regulatory fines across the EU. Several enforcement actions have specifically targeted CCTV operators for improper handling of surveillance footage and DSAR non-compliance.

Ready to automate CCTV redaction for compliance?

Plans start free — see pricing