How to Request CCTV Footage After a Car Accident in Ireland
Author: Gary Matthews, Principal Solicitor — Law Society of Ireland PC No. S8178
This information is for educational purposes only and does not constitute legal advice. Every case is different and outcomes vary. Consult a qualified solicitor for advice specific to your situation.
Summary: To request CCTV footage after an accident in Ireland, submit a Subject Access Request under GDPR Article 15 to the data controller. They must respond within one month. Act within seven days, as most CCTV overwrites within 30 days.
At a glance: Identify the data controller → Send written SAR citing Article 15 → Response due within 1 month → Free of charge → If refused, complain to the DPC.
Contents
Key deadlines at a glance
| Deadline | Timeframe | Source |
|---|---|---|
| Send your SAR | Within 7 days of accident | 7-Day Evidence Lock Protocol |
| Commercial CCTV overwrites | 14 to 30 days | Industry standard (varies by system) |
| Transport CCTV overwrites | 14 to 21 days | Dublin Bus, Luas, Irish Rail |
| Motorway footage overwrites | 7 to 14 days | TII traffic cameras |
| Ring doorbell cloud retention | Up to 180 days (paid plan) | Ring Home subscription |
| Controller must respond to SAR | 1 calendar month | GDPR Article 12(3) |
| FOI response (public bodies) | 4 weeks | FOI Act 2014 |
| Personal injury claim deadline | 2 years from date of knowledge | Civil Liability and Courts Act 2004, s.7 |
The 2-year statute of limitations runs independently of CCTV retention. You can still pursue a claim after footage is lost, but CCTV obtained in the first week can be the evidence that makes or breaks the case two years later. That gap between retention windows measured in days and a claim deadline measured in years is why early action matters so much.
Your legal right to request CCTV footage after an accident in Ireland
Any person whose identifiable image appears on a CCTV recording is classified as a "data subject" under Irish and EU data protection law. Under GDPR Article 15 (as outlined by Citizens Information 1) and Section 91 of the Data Protection Act 2018, you can request a copy of any CCTV footage that contains your personal data. You do not need to be the driver. Passengers, pedestrians, and cyclists hold the same right to access footage showing their image.
A detail that catches many claimants off guard: you do not need a solicitor to submit this request. The right belongs to you personally. You can send a SAR directly to any business, transport operator, or public body that controls the camera system.
Unlike in England and Wales, where the Information Commissioner's Office (ICO) handles CCTV complaints under a separate UK GDPR framework, in Ireland the Data Protection Commission (DPC) 3 enforces the EU GDPR directly. This distinction matters because Irish case law and DPC enforcement decisions apply specifically to requests made here.
How fast does CCTV footage disappear in Ireland?
CCTV retention periods vary dramatically depending on who operates the camera. Most commercial businesses overwrite their recordings every 14 to 30 days. Transport cameras delete far sooner. The Data Protection Commission's CCTV Guidance for Controllers (2023) 4 states that controllers must establish a defined retention period and delete footage once that period expires.
| Evidence source | Legal mechanism | Typical retention | Recommended action deadline |
|---|---|---|---|
| Witness dashcam | Consent / GDPR Article 15 | 2.5 to 20 hours (loop recording) | Immediate / within 24 hours |
| Motorway cameras (TII: M50, tunnels) | Freedom of Information Act 2014 | 7 to 14 days | Within 48 hours |
| Local council traffic cameras | GDPR SAR (if recording) | 72 hours to 14 days (often live-feed only) | Within 48 hours |
| Commercial retail and business CCTV | GDPR Article 15 SAR | 14 to 30 days | Within 7 days |
| Public transport (Dublin Bus, Luas) | GDPR Article 15 SAR | Up to 30 days | Within 7 days |
| Domestic doorbell cameras (Ring, Nest) | GDPR (if captures public space) | Cloud: 30 to 60 days. Local: varies | Within 7 days |
The timing matters more than people realise: if you wait until day 25 to send your request, the controller still has a full calendar month to respond. By then, the original footage on a local hard drive may already be overwritten. Sending your SAR within seven days creates enough buffer to preserve the recording before it cycles.
The 7-Day Evidence Lock Protocol
We call this the 7-Day Evidence Lock Protocol. It works in three steps and directly addresses the gap between CCTV retention windows and the one-month SAR response deadline.
Step 1 (Day 0 to 1): At the accident scene, note every visible camera. Record the business name, camera position, and street address. Take a photograph of any CCTV signage, which typically shows the data controller's name and contact details.
Step 2 (Day 1 to 3): Send a written SAR by email to the data controller's Data Protection Officer (DPO) or general contact. Include a separate preservation notice demanding they freeze the relevant footage pending your request. This creates a formal record that triggers the controller's obligation not to delete the data.
Step 3 (Day 3 to 7): Confirm receipt. If the controller has not acknowledged your request within five working days, send a follow-up and note you will escalate to the DPC 3 if the footage is deleted.
Why this matters: In a published DPC case study on access to CCTV footage (2023) 6, the Commission confirmed that if a controller receives a valid access request and subsequently allows the footage to be deleted before responding, this breaches both Article 12(3) and Article 15 of the GDPR. A DPC fine punishes the business, but it does not recover lost footage for your injury claim.
Backup while you wait: While the SAR is pending, return to the accident scene and photograph every camera you can see. Record the make, model, and mounting position. Photograph any signage showing the controller's identity. Screenshot the location on Google Street View, which preserves historical imagery of the camera's position. If the controller later claims they had no cameras, that the cameras were non-functional, or that the cameras have since been repositioned, your photographs prove otherwise. This backup evidence can also support a DPC complaint if the controller's account of their system does not match the reality you documented.
How to identify the right data controller for your CCTV request
The data controller is the organisation that decides why and how the camera operates. Getting this wrong delays your request and risks losing footage. The table below shows who to contact depending on where the accident happened.
| Accident location | Likely data controller | How to find contact |
|---|---|---|
| Supermarket car park or shop entrance | Retail company (e.g. Dunnes, Tesco, Lidl) | Check CCTV signage on premises for DPO email |
| Public road at junction | Local council (Dublin City Council, SDCC, etc.) | Council DPO via council website |
| Motorway (M50, M1, tunnels) | Transport Infrastructure Ireland (TII) | FOI@tii.ie 2 |
| Dublin Bus route | Dublin Bus (or Go-Ahead Ireland for some routes) | dataprotection@dublinbus.ie |
| Luas tram or station | Transdev (Luas operator) | info@luas.ie via Transport for Ireland |
| Residential doorbell camera | The homeowner (if camera covers public space) | Approach the resident directly |
One aspect the official guidance does not cover: many Dublin Bus routes transferred to Go-Ahead Ireland under a National Transport Authority (NTA) contract. If the bus that witnessed your accident is a Go-Ahead route, sending your SAR to Dublin Bus will not reach the right controller. Check the route number against the TFI website 9 before submitting.
Where to look for cameras by accident type
Most people only notice the obvious cameras. At a typical urban junction, there can be five or more recording devices within range of the accident, and each one has a different controller.
Junction or urban road accident: Check petrol station forecourt cameras, ATM cameras on nearby bank branches (most face outward toward the street), pharmacy and shop CCTV, commercial premises loading bay cameras, residential Ring or smart doorbell cameras on houses facing the road, and any Garda station external cameras within line of sight.
Motorway accident: Look for TII overhead gantry cameras, eFlow ANPR toll-point cameras, service station forecourt CCTV, and variable message sign units (some have integrated cameras). Other drivers' dashcams are also a source, though these require a direct approach to the driver rather than a SAR.
Car park accident: Check the shopping centre or premises management CCTV, individual retailer cameras that face outward toward the car park, ANPR barrier systems at entry and exit points (these log timestamped plate images), and any adjacent ATMs with external cameras.
At a busy junction, the accident may be covered by cameras from two or three separate controllers: a petrol station forecourt, a council pole camera, and a bus passing through. Each controller operates independently, so you must send a separate SAR to each. One controller refusing or delaying doesn't affect the others. Submit all requests on the same day to maximise your chances of securing at least one angle before retention deadlines expire.
Be aware that the respondent's insurer will often conduct their own CCTV trawl in parallel. If they obtain footage you do not have, you won't see it until formal discovery after proceedings issue. Securing your own copy through SAR first means you control the evidence timeline rather than relying on what the insurer chooses to disclose.
Step-by-step: how to write your Subject Access Request
To request CCTV footage after an accident in Ireland, write a formal SAR to the data controller citing GDPR Article 15 and Section 91 of the Data Protection Act 2018. Send it by email to create a timestamped record. According to the Data Protection Commission's SAR guidance (October 2022) 5, verbal requests are valid, but written requests are far easier to prove if you need to escalate.
What to include in your SAR letter
1) Your full name and a copy of photo identification (passport or driving licence).
2) A clear statement: "I am making a Subject Access Request under Article 15 of the GDPR and Section 91 of the Data Protection Act 2018."
3) The exact date and a narrow time window (e.g. 15-minute interval) of the incident.
4) The precise camera location. Use a street address or GPS coordinates if possible.
5) A description of yourself and your vehicle to help the controller identify you in the footage.
6) A preservation notice: "I request that you immediately preserve all CCTV recordings from [date/time/location] pending fulfilment of this request."
7) Your preferred format for receiving the footage (digital copy via encrypted USB or secure email).
Practical tip: Keep the time window as narrow as possible. A request covering "all footage from Tuesday" across a large premises may be rejected as manifestly excessive under Article 12(5). Fifteen to thirty minutes is typically sufficient and harder to refuse.
Sample SAR letter for CCTV footage in Ireland
Copy and adapt this template. Replace the bracketed fields with your details and send by email to create a timestamped record.
To: [Data Controller name and email]
Date: [Today's date]
Subject: Subject Access Request: CCTV footage
Dear Data Protection Officer,
I am making a Subject Access Request under Article 15 of the General Data Protection Regulation and Section 91 of the Data Protection Act 2018.
I request copies of all CCTV recordings in which I or my vehicle appear from the following location and time:
Date of incident: [DD/MM/YYYY]
Time window: [e.g. 14:15 to 14:30]
Camera location: [Exact address or GPS coordinates]
Description of me: [Height, clothing, distinguishing features]
Vehicle: [Reg, make, model, colour]I also request that you immediately preserve all recordings from this date, time, and location pending fulfilment of this request.
Please provide the footage as a digital copy in its original file format via encrypted USB or secure email. If providing a converted copy, please also include the original proprietary file to preserve embedded metadata.
Under Article 12(3) of the GDPR, you must respond within one calendar month. If you are unable to comply, please provide written reasons citing the specific exemption relied upon.
I enclose a copy of my [passport/driving licence] as proof of identity.
Yours faithfully,
[Your full name]
[Your email address]
[Your phone number]
How to get CCTV from Dublin Bus, Luas, and Bus Eireann
Summary: To request CCTV from Dublin Bus, email a Subject Access Request to dataprotection@dublinbus.ie citing GDPR Article 15. For Luas tram or platform footage, contact info@luas.ie. For Bus Eireann, email dataprotection@buseireann.ie. For Dublin commuter routes operated by Go-Ahead Ireland, email dataprotection@goaheadireland.ie. Include the route number, date, time, and your Leap Card number if you were a passenger. Transport CCTV typically overwrites within 14 to 30 days, so submit within 7 days of the accident.
Public transport operators in Ireland maintain multi-angle CCTV across their fleets. These recordings are valuable because they capture the approach, impact, and aftermath from several positions.
Dublin Bus
Send your SAR to dataprotection@dublinbus.ie 8 or by post to the Data Protection Officer, Dublin Bus, 59 Upper O'Connell Street, Dublin 1. Include the route number, direction of travel, approximate bus registration if known, and your Leap Card number if you were a passenger. Dublin Bus responds within 30 calendar days and provides footage in pixelated video format, delivered via registered post or encrypted USB.
Luas (Transdev)
For tram or platform footage, direct your SAR to info@luas.ie through Transport for Ireland 9. If you tapped a Leap Card during your journey, request your Leap Card transaction history from leapcard.ie at the same time. The timestamp proves you were on a specific tram at a specific time, making it harder for the operator to claim they cannot locate the relevant footage.
Bus Eireann and Go-Ahead Ireland
Route your request to dataprotection@buseireann.ie for intercity services. For Dublin commuter routes operated by Go-Ahead Ireland, contact dataprotection@goaheadireland.ie. Confirm the operator before submitting, as sending a SAR to the wrong company wastes time the retention clock does not pause for.
Motorway cameras and local council CCTV: FOI vs GDPR
This distinction catches many people out. There are two separate legal routes depending on who controls the camera, and mixing them up wastes time you may not have.
Motorway cameras (TII)
If your accident occurred on the M50, M1, Dublin Tunnel, Jack Lynch Tunnel, or another national road, the cameras are controlled by Transport Infrastructure Ireland (TII). TII operates ANPR and CCTV for traffic monitoring, journey-time calculations, and toll enforcement. To request footage, submit a Freedom of Information request to FOI@tii.ie 2. Explicitly state you are making the request under the Freedom of Information Act 2014. The statutory response time is four weeks, but the real deadline is the retention window: motorway footage typically overwrites within 7 to 14 days, so submit within 48 hours.
Local council traffic cameras
Major councils including Dublin City Council and South Dublin County Council operate Urban Traffic Management Control (UTMC) systems. A critical point: many of these cameras provide a live feed only. South Dublin County Council's traffic management page explicitly states their cameras are used for real-time signal timing and don't record or store images 12. You can't request footage that was never recorded.
The DPC has also completed formal investigations into local authority CCTV, including its inquiry into Limerick City and County Council (December 2021) 13, Galway, and Sligo councils, finding several lacked a valid lawful basis for processing personal data through their camera networks. Some were issued temporary bans on CCTV processing. The practical implication: a visible camera on a pole at a junction may not be recording, or may be legally prohibited from operating. Do not rely solely on council cameras. Prioritise commercial CCTV from nearby businesses as a backup.
eFlow ANPR records as corroborating evidence
If your accident occurred on or near the M50, eFlow's barrier-free tolling system captures multiple images of every vehicle and registration plate at the toll gantry between Junction 6 and Junction 7. eFlow is a registered business name of TII, and the ANPR images constitute personal data under GDPR because the registered owner is identifiable from the plate. You can submit a SAR to the eFlow Data Protection Officer at dataprotection@eflow.ie requesting your passage records for the relevant date. The result isn't video footage of the collision itself, but a timestamped record proving your vehicle crossed a specific point at a specific time. When liability is disputed and the other driver claims you were not on the M50 at all, this record can be decisive.
Can you request footage from a doorbell camera or home CCTV?
Smart doorbells and residential security cameras are increasingly capturing road accidents in urban areas. The legal position is nuanced. Under Article 2(2)(c) of the GDPR, processing by a private individual for purely personal or household purposes is exempt from data protection law. The Data Protection Commission's domestic CCTV guidance (November 2021) 14 clarifies that this exemption vanishes once the camera captures images of people in public spaces outside the property boundary, such as the road or footpath where a collision occurred.
When the exemption no longer applies, the homeowner technically becomes a data controller with full GDPR obligations. In theory, you can serve a formal SAR. In practice, enforcement against a private citizen is slow and uncertain. The DPC receives hundreds of domestic CCTV complaints annually but cannot prioritise individual disputes quickly.
A more effective approach: knock on the door, explain what happened, and politely ask if they would review the footage. Bring a blank USB drive. Most people will help if asked respectfully. Formal legal demands tend to produce resistance rather than cooperation.
Cloud-stored footage: Ring Protect and Tesla Sentry Mode
Two newer evidence sources have significantly longer retention windows than traditional DVR systems. If a neighbouring property has a Ring doorbell with an active Ring Home subscription (formerly Ring Protect Plus), recorded footage is stored in Amazon's cloud for up to 180 days. That is six times longer than most commercial CCTV systems. Even if you discover the camera weeks after the accident, the footage may still be retrievable if the homeowner checks their app. Ask the neighbour to download and share the specific clip before the cloud retention window expires.
If a parked Tesla witnessed your accident, its Sentry Mode may have captured the collision. Tesla Sentry Mode records continuously from the vehicle's external cameras and saves triggered clips to the car's onboard USB storage and optionally to the Tesla app. Retention depends on the owner's storage capacity and whether they have driven enough since the incident to overwrite it. Unlike a fixed CCTV system, a Tesla can be parked anywhere, so a vehicle that was in the vicinity at the time of your accident may hold footage nobody else thought to check. Approach the owner directly and ask them to review their Sentry Mode events for the relevant date and time.
What to do when your CCTV request is refused in Ireland
Businesses sometimes refuse to release CCTV footage. The reasons they give are often wrong. A Data Protection Commission blog post published on 10 February 2021 15 confirms that the right to request access to personal data applies whether or not you are involved in litigation against the data controller. Controllers cannot use a pending injury claim as a blanket reason to deny your SAR.
"Litigation privilege" refusals
The most common refusal tactic. After an accident on their premises, a business may claim the footage is protected by litigation privilege because they anticipate a legal claim. Irish regulatory precedent dismantles this argument. In the DPC's published case study on exemptions applied to CCTV footage (2023) 16, upheld by the High Court in Dublin Bus v Data Protection Commissioner, the courts confirmed that footage originally captured for security and safety purposes can't be retrospectively cloaked in litigation privilege simply because a claim has arisen.
"Third-party privacy" refusals
Controllers sometimes refuse because other people appear in the recording. This is not a valid ground for outright refusal. The DPC's CCTV guidance 4 requires the controller to pixelate or blur third-party faces before releasing the footage. The redaction cost falls on the business, not you. If the controller claims it lacks the technical capacity, the DPC has indicated they must use a third-party processor to achieve compliance.
"Gardai only" refusals
Some businesses incorrectly tell accident victims that only An Garda Siochana can request CCTV. This is false. An Garda Siochana can request footage for criminal investigations, but your right as a data subject under Article 15 exists independently and in parallel. The two mechanisms are separate. Any policy restricting CCTV access to Gardai only contravenes GDPR.
When Gardai have already seized the footage
If your accident involved a criminal element such as a hit-and-run, dangerous driving, or a fatality, Gardai may have already obtained the original recording as evidence. Under Section 41 of the Data Protection Act 2018, a controller is permitted (but not compelled) to disclose personal data to law enforcement where doing so is necessary and proportionate for the prevention, detection, investigation, or prosecution of criminal offences. Gardai may also obtain footage under a court order or warrant. In either case, the controller may truthfully tell you they no longer hold the recording. Your SAR to the original controller is technically satisfied. But the footage still exists in Garda custody. To obtain it, your solicitor can request disclosure through the prosecution process, or it may appear in the Book of Evidence if criminal proceedings are brought. The critical point: a Garda seizure does not destroy your right to the footage. It changes the route you must take to access it.
Three myths that cost claimants their CCTV evidence
Myth 1: "They have 40 days to respond." This was the deadline under the Data Protection Act 1988, which has been largely superseded. Under the GDPR and Data Protection Act 2018, the deadline is one calendar month. Some other legal websites still state 40 days. That information is out of date.
Myth 2: "You'll have to pay for pixelation." Under GDPR Article 15(3), the first copy of personal data must be provided free of charge. The DPC has ruled that redacting third-party faces is an administrative cost the controller bears, not the requester, unless the request is manifestly unfounded or excessive. DPC CCTV Guidance (2023) 4.
Myth 3: "The Dudgeon case means businesses can refuse." In Dudgeon v Supermacs Ireland Ltd IEHC 600, Mr Justice Barr ruled on a discovery motion, not a data protection request. According to the Data Protection Commission (10 February 2021) 15, the decision relates to litigation discovery only and does not affect your GDPR access rights. Controllers remain obliged to fulfil SARs for CCTV footage regardless of pending litigation.
How to complain to the DPC if your CCTV request is ignored
If a controller fails to respond within one month, provides an incomplete response, or refuses without a valid legal basis, you can escalate by filing a formal complaint with the Data Protection Commission 3, as provided for under Section 109 of the Data Protection Act 2018.
1) Gather your evidence: a copy of your original SAR email, proof of delivery (read receipt or tracked email), the controller's response (or lack of response), and any correspondence.
2) Submit your complaint through the DPC online complaint form 3. Include specific dates, the controller's identity, and a clear description of the breach.
3) The DPC will assess your complaint. If they find the controller breached Article 12(3) or Article 15, they can order the controller to comply and impose administrative fines. In a published DPC case study on failure to respond to CCTV requests (2023) 17, the Commission found a controller failed to monitor its email inbox and allowed requested footage to be deleted, constituting a clear breach.
Between assessment and resolution, the sticking point is usually proving you sent a valid request. Keep copies of everything. A tracked email with read receipt is stronger evidence than a phone call.
What happens after you submit your CCTV request
Most guides stop at "send your SAR and wait." In practice, controllers respond in six different ways, and each requires a different next step.
| Response you receive | What it means | Your next move |
|---|---|---|
| Full video file provided | Controller met their Article 15 obligation | Preserve the original file and pass it to your solicitor. Do not convert or rename it. |
| Still images only (no video) | May breach Article 15 if continuous video exists on the system | Write back requesting the full video recording. Cite the DPC CCTV access case study (2023) 6 where incomplete responses were found to breach the controller's obligations. |
| Redacted footage (faces blurred) | Controller applied third-party privacy redaction | Acceptable. Check that your own image and vehicle are clearly visible. If your image is also redacted, challenge as disproportionate. |
| Refusal with a stated reason | Controller claims an exemption (litigation privilege, law enforcement, etc.) | Check the exemption against the specific grounds in the refusal section above. Most refusals don't withstand scrutiny. |
| No response after one month | Breach of Article 12(3) GDPR | File a formal DPC complaint. The one-month clock starts from the date they received your SAR, not when they read it. |
| "Footage already deleted" | Controller claims the recording was overwritten before your SAR arrived | Don't accept this at face value. Ask for their written retention policy and verify the claim (see below). |
Knowing these outcomes in advance means you can respond within hours rather than weeks, which matters when retention deadlines are still running on other cameras you haven't yet requested.
Why CCTV evidence matters for your IRB personal injury claim
A personal injury claim in Ireland must first go through the Injuries Resolution Board (IRB), formerly known as the Personal Injuries Assessment Board (PIAB) until 2023. The IRB assesses claims on paper only. It doesn't conduct hearings, interview witnesses, or gather evidence on your behalf.
If the respondent's insurer disputes liability, timestamped CCTV footage submitted with your IRB application can be the deciding factor that prevents a rejection. Without objective evidence, the insurer's version of events may go unchallenged at assessment stage.
If your claim ultimately proceeds to the Circuit Court or High Court, CCTV footage becomes formally discoverable evidence. Securing it on day seven of your claim journey directly supports your position years later if the case reaches a hearing. Failure to preserve digital evidence early often surrenders the narrative of the accident to the opposing insurer.
Unlike in England and Wales, where formal pre-action protocols exist under the Civil Procedure Rules, Ireland uses Section 8 notices under the Civil Liability and Courts Act 2004. CCTV evidence isn't part of a pre-action protocol here because Ireland doesn't have one. Gathering it proactively is therefore entirely your responsibility.
What if the CCTV shows you were partly at fault?
A common fear that stops people requesting footage is the worry it might show contributory negligence on their part. This concern is understandable but misplaced. Even if CCTV reveals you were 20% or 30% at fault, a reduced award reflecting that proportion is far better than abandoning the claim entirely because you lacked evidence. Under Irish law, contributory negligence reduces your award proportionally rather than eliminating it. More importantly, once proceedings are anticipated, you have disclosure obligations under discovery rules. Not requesting footage does not make unfavourable evidence disappear. It simply means you lose control of the narrative and allow the insurer to present their version unchallenged. Securing the footage early lets your solicitor assess liability honestly, build a realistic strategy, and avoid surprises later in the process.
How to preserve the evidential weight of CCTV footage
Obtaining CCTV is only half the task. If the footage can't be authenticated in court, its value drops sharply. Under Irish law, video recordings are classified as real evidence. To be admissible, the party relying on the footage must be able to demonstrate that the recording is authentic and has not been tampered with. The court will want to know how the recording was made, who held it after it was made, and whether the file has been altered at any point in the chain.
When you receive CCTV from a controller, note the date you received it, the format of the file, and the method of delivery (encrypted USB, secure email, registered post). Do not rename the file, edit it, or convert it to another format. If your solicitor needs a playable version, create a separate copy and keep the original untouched. The original file's embedded metadata, including timestamps, camera serial numbers, and hash values, is what gives the footage its forensic credibility. If that metadata is stripped during a casual format conversion, the opposing side can challenge the recording's reliability.
Pass the original file to your solicitor as early as possible. Once it is in professional custody, the chain of custody is documented. If your claim reaches the Circuit Court or High Court, your solicitor can explain the provenance of the file to the judge without gaps that the defence could exploit.
What happens once your solicitor has the footage
Your solicitor will review the footage for liability indicators: speed of approach, traffic signal phase, lane positioning, and any actions by the other driver that support your account. If the recording quality is poor, the solicitor may commission a forensic video analyst to enhance low-resolution frames or stabilise shaky footage without altering the original file. The footage is then included as supporting evidence with your IRB application. If the IRB assessment is contested and the claim proceeds to the Circuit Court or High Court, the footage becomes formally discoverable. At that stage, the opposing side can request a copy through discovery, but because you secured it early and maintained chain of custody, you control when and how it enters the proceedings rather than relying on whatever version the insurer chooses to present.
Common questions about requesting CCTV after an accident in Ireland
Can a business charge me for CCTV footage in Ireland?
No. Under GDPR Article 15(3), the first copy of your personal data must be provided free of charge. The controller bears all redaction and administrative costs.
Some businesses attempt to quote fees for pixelation work, but the DPC has consistently held that these costs are the controller's compliance obligation. The only exception is when a request is proven to be manifestly unfounded or excessive, which is a high threshold to meet for a straightforward accident footage request.
Why it matters: Do not let a fee demand delay your request. Respond citing Article 15(3) and proceed.
Next step: GDPR rights (Citizens Information) 1
How long does a business have to respond to a CCTV request?
One calendar month from the date they receive your valid SAR. The controller can extend this by two further months for complex requests, but must notify you of the extension within the first month.
In practice, the real risk isn't the response deadline but the retention window. If you submit late and the controller takes the full month, the footage may already be overwritten by the time they process your request.
Why it matters: Submit early. The statutory deadline protects you legally, but it doesn't protect the footage physically.
Next step: DPC SAR FAQ 5
Do I need a solicitor to request CCTV in Ireland?
No. Any individual can submit a SAR directly under Article 15. A solicitor is not a legal requirement for the request itself.
That said, a solicitor can draft a stronger preservation notice, manage multiple requests across several controllers simultaneously, and escalate to the DPC more effectively if a controller refuses or delays. For complex accidents involving multiple camera sources, professional management of the evidence trail reduces the risk of gaps.
Why it matters: You've the right to act alone, but professional help reduces errors when timing is critical.
Next step: Evidence gathering guide
What if the CCTV footage has already been deleted?
If the retention period has expired before your request, the controller must inform you the footage no longer exists. You can't recover overwritten data.
If the controller deleted footage after receiving your SAR, that is a different matter. According to the Data Protection Commission's CCTV Guidance for Controllers (2023) 4, footage must not be deleted once a valid access request has been received. Deliberate or negligent deletion after notice is a breach you can report to the DPC.
Before accepting a deletion claim, verify it. Ask the controller for their written data retention policy. Under Article 5(2) GDPR, they must be able to demonstrate one. Check whether other cameras on the same system still hold footage from the same date. If camera 3 has recordings but camera 7 allegedly doesn't, the deletion claim weakens. Ask when the DVR system was last serviced, upgraded, or had its storage replaced. If the respondent's insurer requested footage before yours was "deleted," that raises questions the DPC will want answered. A false deletion claim is an accountability breach under Article 5(2) and can itself be reported.
Why it matters: Speed is the only real protection. No complaint recovers lost footage, but verifying a deletion claim can expose a breach that strengthens your position.
Next step: How to complain to the DPC
How do I get dashcam footage from a witness?
Exchange contact details at the scene. A witness dashcam recording belongs to the witness. You can request it through consent or, in some cases, through a SAR if the recording contains your personal data.
The more urgent concern is loop recording. Depending on SD card capacity, a dashcam can overwrite its oldest files in as little as 2.5 hours of continuous driving. If a witness has a dashcam, ask them to press the manual lock or save button immediately, or to turn the camera off to prevent the loop from erasing the collision recording.
Why it matters: Witness dashcam footage is often the most objective evidence available.
Next step: Dashcam and CCTV evidence guide
What format will I receive the CCTV footage in?
Typically as a pixelated video file on an encrypted USB drive or via secure email. Some controllers provide still images (one frame per second) rather than continuous video.
The DPC has indicated that providing still images alone may not fully satisfy Article 15 if continuous video exists. If you receive only stills, you can request the full video recording and cite the DPC CCTV access case study (2023) 6 where incomplete responses were found to breach the controller's obligations.
A sticking point that surprises many claimants: some businesses export footage in proprietary formats such as .dav or .h264 that standard media players cannot open. These files are locked to the DVR manufacturer's software and may require a specific viewer to play back. If you receive a file you can't open, ask the controller for the name and model of their DVR system and download the manufacturer's free viewer. Do not convert the original file to MP4 yourself before passing it to your solicitor. Format conversion can strip embedded metadata such as timestamps and camera identifiers, which weakens the evidential weight of the recording. Always preserve the original proprietary file alongside any converted copy.
Why it matters: Video shows speed, timing, and movement. Stills can miss critical details. Proprietary formats require careful handling to maintain their value as evidence.
Next step: DPC CCTV guidance 4
Can I request CCTV from multiple businesses for the same accident?
Yes. There's no limit on the number of SARs you can send. A junction accident may be captured by a petrol station, a shop, a bus, and a residential camera. Send separate requests to each controller.
The difference between a strong claim and a weak one often comes down to how many angles you can secure. Each perspective adds context that a single camera may miss.
Why it matters: More angles mean stronger evidence and fewer gaps in the sequence of events.
Next step: Evidence checklist
How do I get traffic camera footage from the M50 in Ireland?
Submit a Freedom of Information request directly to Transport Infrastructure Ireland (TII) at FOI@tii.ie 2. Cite the Freedom of Information Act 2014 explicitly. Do not send a standard GDPR SAR, as TII motorway footage typically falls under FOI.
Motorway cameras overwrite within 7 to 14 days. Submit your request within 48 hours of the accident. The four-week FOI response deadline is slower than the footage retention window, so urgency is essential.
Why it matters: Sending the wrong type of request to TII wastes time the retention clock does not pause for.
Next step: TII FOI page 2
Can a controller legally restrict access to CCTV in Ireland?
Yes, but only in narrow circumstances. Section 60(3)(a)(iv) of the Data Protection Act 2018 allows a restriction where it's "necessary and proportionate" to protect the rights of others or to prevent obstruction of legal proceedings. This is a high threshold.
According to the Data Protection Commission, the motive behind your request is not a relevant factor under GDPR. A controller can't refuse simply because they suspect you plan to use the footage in a personal injury claim. The DPC's 2021 blog post 15 on this point is clear.
Why it matters: Most refusals do not meet the Section 60 threshold. Challenge them.
Next step: Section 60, Data Protection Act 2018
What to consider next
What if the insurer disputes how the accident happened? CCTV footage often resolves liability disputes that would otherwise become a word-against-word argument. If you've the footage, include it with your IRB application. If you don't, your claim relies on witness statements and Garda reports, which may be incomplete.
What other evidence should I collect alongside CCTV? CCTV proves what happened. Medical records prove the injury. Receipts prove financial loss. Each serves a different purpose. See our accident evidence checklist for a complete list.
What if I missed the retention window entirely? If all footage is gone, your claim is not automatically finished, but it becomes harder to prove. Witness statements, Garda pulse records, and your own accident scene photographs become more important.
Related internal guides: Evidence hub • Dashcam and CCTV evidence • Evidence checklist • Scene photos guide • Hit-and-run claims • Bus and taxi passenger claims
References and Sources
- How to access your personal data under the GDPR. Citizens Information. Updated 2025.
- Freedom of Information. Transport Infrastructure Ireland. 2025.
- Raising a Concern with the Commission. Data Protection Commission. 2025.
- Guidance on the Use of CCTV for Data Controllers. Data Protection Commission. November 2023.
- Subject Access Requests: What are they and how can I make one?. Data Protection Commission. October 2022.
- Access to CCTV Footage Case Study. Data Protection Commission. 2023.
- Data Protection Act 2018, Section 91. Irish Statute Book.
- Making a Subject Access Request. Dublin Bus. 2025.
- Transport for Ireland. National Transport Authority. 2025.
- Leap Card Terms and Conditions. National Transport Authority. 2025.
- Data Protection Notice. Transport Infrastructure Ireland. 2025.
- Traffic Management. South Dublin County Council. 2025.
- Inquiry into Limerick City and County Council. Data Protection Commission. December 2021.
- Domestic CCTV Guidance. Data Protection Commission. November 2021.
- CCTV, Discovery and Access Requests. Data Protection Commission. 10 February 2021.
- Exemptions Applied to CCTV Footage Case Study. Data Protection Commission. 2023.
- Failure to Respond to a Request for CCTV Footage Case Study. Data Protection Commission. 2023.
- Making a Claim. Injuries Resolution Board. 2025.
- Civil Liability and Courts Act 2004, Section 8. Irish Statute Book.
- Data Protection Act 2018, Section 60. Irish Statute Book.
Gary Matthews Solicitors
Medical negligence solicitors, Dublin
We help people every day of the week (weekends and bank holidays included) that have either been injured or harmed as a result of an accident or have suffered from negligence or malpractice.
Contact us at our Dublin office to get started with your claim today
