Surveillance Data Governance in Multi-Tenant Properties
Who can see and share building camera footage? A practical Ontario guide to landlord and tenant responsibilities, incident requests and privacy.
Who gets to see the building’s camera footage after something goes wrong? The federal privacy commissioner’s landlord-and-tenant guidance, last modified June 18, 2026, addresses both sides of that question: landlords should explain how footage is used, and individuals generally have access rights to their own personal information under PIPEDA.
For a multi-tenant property, the practical answer starts with identifying who controls the recording, routing the request promptly, and separating permission to preserve footage from permission to release it. Buying more cameras will not resolve an unclear handoff between the landlord, managing agent and tenant.
This guide focuses on commercial buildings and their shared spaces. Residential examples help explain the concern, but a resident, a business tenant and a public-sector institution can have different legal positions. Confirm the applicable rules before making a disclosure decision.
Something happened. Who should the tenant contact?
Give tenants one clearly identified contact who can route a request to the organization responsible for the relevant camera. Avoid leaving the receptionist to guess whether the landlord, tenant or security contractor can help.
Consider an illustrative office-building scenario. Equipment is reported missing after a delivery. The tenant has a camera inside its suite; the landlord has one covering the loading entrance. Each recording may help explain a different part of the event. The delivery could also have passed outside either camera’s view.
The immediate job is to identify potentially relevant recordings and ask the authorised person to assess preservation. That should happen while the request’s legal basis and scope are being reviewed. Sending the tenant between suppliers can waste the time available before routine overwrite. Cameras can document what they actually capture; they cannot recover a scene that was never recorded.
Ask for the approximate date, time range and location, plus a contact for follow-up. Keep sensitive details out of a building-wide email. A short acknowledgement should say who is handling the request and what information is still needed. It should avoid promising that useful footage exists or that a copy can be released.
Does owning the camera settle who is responsible?
Identify the organization controlling the personal information and the roles of everyone handling it. Hardware ownership alone is an incomplete responsibility map.
PIPEDA applies to personal information handled in the course of commercial activities, subject to its scope and exceptions. Its accountability principle requires an organization to designate responsible individuals. An organization remains responsible for information transferred to a third party for processing and must use contractual or other means to provide comparable protection. See PIPEDA, section 4 and Schedule 1, principle 4.1.
Translate that into a short operating agreement. The following is a proposed starting point to adapt with your privacy adviser, rather than a legal allocation that automatically applies to every lease.
| Recording or activity | Responsibility to settle in writing |
|---|---|
| Landlord’s shared-area cameras | Who approves purposes, fields of view, access and disclosure decisions? |
| Tenant’s in-suite cameras | Who handles requests and prevents unintended coverage beyond the suite? |
| Managing agent’s daily work | What can staff view, preserve or export, and what needs approval? |
| Security or cloud service provider | What processing is authorised, who can give instructions, and how is access removed? |
| An incident crossing several camera areas | Who coordinates requests without automatically pooling all recordings? |
Ask each party to name a backup contact. Check this arrangement whenever a tenant leaves, management changes or a service contract ends. An old administrator account can outlast the business relationship unless someone is assigned to remove it.
Can everyone in the building watch the shared cameras?
Treat viewing access as a specific permission tied to a purpose. Sharing a lobby does not make unrestricted viewing a sensible default.
The federal private-sector video-surveillance guidelines recommend limiting access to authorised individuals, securing recordings and documenting justified disclosures outside the organization. They also recommend clear notice and a contact for questions or requests.
For a building manager, a practical starting point is to separate live viewing, playback and export permissions. A person who needs to respond to an entrance intercom may have no operational need to browse yesterday’s lobby movements. A contractor checking a camera fault may need a temporary technical session rather than an ongoing account.
Ask the supplier to demonstrate the restrictions using an ordinary staff account. Can that account open another tenant’s area? Can it download a clip? Can an administrator see who performed an export? Record any limitation the system cannot enforce and decide whether a supervised process is adequate.
Review camera views with tenants at shared boundaries. In a mixed-use property, the OPC’s landlord guidance specifically says cameras should not capture apartment interiors. In commercial space, examine whether a view unnecessarily exposes neighbouring work areas, visitors or sensitive activities. A narrower view or revised process may be enough; additional equipment should follow a demonstrated need.
Can a person get footage showing themselves?
An individual’s access request needs its own process. It should not be treated as an ordinary request for a favour or confused with a company’s request for evidence of a loss.
The OPC’s individual-access guidance explains that people generally have a right to their personal information. Under PIPEDA, organizations normally have 30 days to respond, with extensions permitted in specified circumstances. Access can be limited by exceptions, including protection of other people’s information. Refusals need reasons and information about recourse.
For a recording, the review may involve separating a relevant portion or obscuring unrelated people. Build that ability into the service arrangement before a difficult request arrives. Confirm who performs the work, how it is checked and whether the organization can obtain the original recording from its provider.
An older Ontario decision illustrates why the answer can vary within the same request. In IPC Order MO-4422, dated August 15, 2023, the adjudicator ordered a community-housing provider to release some footage while upholding withholding of other recordings. That decision applied Ontario’s municipal access-and-privacy law to particular facts. It shows the importance of examining the actual record; it does not create a universal private-landlord disclosure rule.
For the requester, specifying a narrow time and location helps the organization locate the material. For management, preserve the request and decision trail. Avoid asking an individual to circulate identity documents through a general tenant mailing list.
What changes when police, an insurer or another tenant asks?
Assess the recipient, purpose and legal authority separately for each request. Permission for one disclosure does not establish permission for every subsequent use.
PIPEDA contains defined exceptions allowing disclosure without consent, including certain law-enforcement circumstances. Have the responsible person verify the applicable basis and any compulsory legal demand. A police request, an insurer’s inquiry and a tenant’s wish to identify someone should each receive the appropriate review rather than an automatic export.
Use a disclosure record that identifies who approved release, what was sent, to whom, why and by what secure route. If several organizations hold relevant footage, coordinate their responses without giving everyone access to the entire building system. Keep the original recording protected and distinguish it from any edited copy prepared for an authorised recipient.
Preservation and release are separate decisions. PIPEDA’s section 8(8) requires information subject to an access request to be retained long enough to allow the individual to exhaust available recourse. Other legal obligations may also affect preservation. Have an authorised person assess those duties promptly instead of applying routine deletion without review.
As an operational rule, do not forward a clip to a tenant group chat or social media while its release is still being assessed. A clip may reveal unrelated visitors and may lack the context needed to understand what occurred. Immediate threats should follow the building’s emergency procedures, with the footage request handled alongside the response.
Are the rules the same in every Ontario building?
No. Establish the legal context before borrowing another property’s policy.
Ontario’s IPC video-surveillance guidance page currently warns that public-sector access and privacy laws have changed in 2026 and that some guidance is under review. Its underlying surveillance publication is dated October 6, 2015. That is a reason to check current requirements, rather than copy an older public-sector template into a private commercial lease.
Public institutions, private commercial organizations, residential arrangements and employment-related monitoring can raise different questions. Get qualified privacy or legal advice on the organization’s actual activities and responsibilities. A building’s location in Ontario does not, by itself, settle which law governs every recording.
Use the broader Ontario video-surveillance privacy guide for the surrounding design questions. This article’s narrower job is to make the handoff between parties understandable and workable.
What can we improve without replacing the system?
Start with the contact route, permissions and a safe practice request. These can expose an administrative gap before anyone commits to a purchase.
Choose a staged example involving consenting staff and a non-sensitive area. Ask the team to identify the responsible organization, route a limited preservation request and explain the disclosure decision. Have the authorised operator demonstrate that the relevant recording can be found and that a restricted account cannot browse beyond its assigned role. Do not distribute real tenant footage for training.
The exercise should leave you with five clear answers:
- Who receives the request, including outside normal office hours?
- Who can preserve the relevant recording while the request is reviewed?
- Who decides whether access or disclosure is permitted?
- Who prepares and checks any limited or obscured copy?
- Who records the outcome and reviews when preserved copies can be deleted?
Ask providers to price the work these answers require: staff training, account administration, secure exports, privacy review support and obscuring unrelated people where needed. Establish which tasks your team can perform and which require specialist assistance. There is no assumed price or saving here; effort depends on the recordings and request.
If the existing system can support the agreed process, keep it and correct the workflow. If it cannot restrict access or provide usable exports, ask for a focused remedy and a demonstration before approving changes. Securitron can help review the technical responsibilities within your commercial property security arrangements, alongside your organization’s privacy and legal advisers.
Frequently Asked Questions
A person can generally request their own personal information under PIPEDA where it applies, subject to exceptions and protection of other people's information. A business tenant asking for footage of a loss is making a different kind of request. Identify the organization controlling the recording and explain the time, location and purpose of the request.
Do not assume a shared lobby means shared viewing rights. Assess the purpose and authority for access, the people visible and the minimum view needed. A controlled incident-request process may meet the need without giving every tenant continuous access.
Privacy requires a proper assessment rather than a blanket answer. Depending on the applicable law and request, some information may be accessible after unrelated people are obscured or portions are separated. Other information may properly be withheld. Ask the responsible privacy contact for a written response.
Promptly route the request to someone authorised to assess preservation, so relevant footage is not routinely overwritten while the request is considered. Preserving a limited recording does not itself authorise disclosure. Formal access requests and legal obligations can require retention beyond the routine schedule.
