Wembley Stadium CCTV Transparency Notice

Purpose of This Notice

This Transparency Notice explains how Wembley National Stadium Ltd (“Wembley”, “we”, “us”) collects, uses, stores, and shares personal data obtained through our CCTV and video surveillance systems. It also explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our aim is to ensure that all CCTV activity at Wembley is carried out lawfully, fairly, transparently, and in a way that protects everyone’s privacy while maintaining a safe and secure stadium environment.

CCTV is used across the stadium and surrounding perimeter for the following purposes:

Safety and security of visitors, staff, players, contractors, and guests
Crime prevention, detection, and investigation
Monitoring crowd movement and operational safety during events
Supporting incident response and emergency procedures
Assisting law enforcement and regulatory authorities when required
Protecting stadium property and infrastructure

We do not use CCTV for employee performance monitoring or any purpose incompatible with those stated above.

Under the UK GDPR, our lawful bases for processing CCTV footage are:

Legitimate Interests (Article 6(1)(f)) – to protect public safety, prevent and detect crime, protect our premises and assets, and support effective operations.
Legal Obligation (Article 6(1)(c)) – where CCTV is necessary to meet applicable legal, licensing, health and safety, or regulatory requirements.

CCTV footage may occasionally capture special category personal data. Where this occurs, we rely on an appropriate condition under Article 9 UK GDPR and (where required) Schedule 1 of the Data Protection Act 2018, which may include (but is not limited to) substantial public interest conditions (such as preventing or detecting unlawful acts or safeguarding individuals at risk) or legal claims.

Where CCTV footage captures evidence of criminal offences, we may use and disclose that footage for the purposes of preventing, detecting, investigating and prosecuting crime. Any disclosure to the police

CCTV cameras operate:

Throughout stadium concourses, circulation areas, bowl seating, entry points, and other open public areas where visitors may reasonably be present

Around external perimeter zones, turnstiles, ingress/egress routes, and coach parks
In areas necessary for protecting staff-only zones, key assets, and operational control rooms

CCTV is not used in areas where there is a heightened expectation of privacy such as toilets or prayer spaces.

Footage is recorded 24/7 during both event and non‑event periods.

The CCTV system captures:

Video images of individuals
Movements, behaviours, and interactions within monitored zones
Time and location metadata associated with recordings

Some specialist systems (e.g., ANPR, body‑worn video operated by authorised staff, or facial detection analytics if deployed) may capture additional technical data.

We retain CCTV footage for the minimum period necessary, typically no longer than 30 days, unless:

An incident, complaint, or investigation requires footage to be kept for longer
Law enforcement agencies request preservation
Retention is necessary for legal claims, regulatory obligations, or safety reviews

Footage is securely deleted once retention periods expire.

Footage may be shared with (including, not limited to):

The Police Service, emergency services, or counter‑terrorism partners when lawfully requested
Regulators such as the Sports Grounds Safety Authority (SGSA) or the local authority
Event organisers, where required to investigate operational or safety‑related incidents
Insurers or legal representatives for claims handling
Contracted security providers, bound by strict confidentiality and data-processing agreements

CCTV footage is protected through:

Controlled access restrictions
Encrypted digital storage
Physical and procedural security measures
Staff training on GDPR and data handling
Regular audits and compliance reviews

Only authorised personnel may view footage, and access is logged and monitored.

Under UK GDPR, you have the right to:

Request access to CCTV images that identify you
Request correction of inaccurate data
Request restriction or deletion, where applicable
Object to processing in certain circumstances
Complain to the UK Information Commissioner’s Office (ICO)

Website: https://ico.org.uk

If you wish to request CCTV footage of yourself, please note:

We must be able to identify you in the footage
We may need additional information (e.g., date/time/location)
We may need to redact third‑party individuals before release

We may be unable to provide CCTV footage where disclosure would compromise security, prejudice the prevention or detection of crime, interfere with an ongoing investigation, adversely affect the rights and freedoms of others, or where any other applicable exemption under data protection law applies.Requests will be handled within one calendar month, in line with UK GDPR.

For questions, concerns, or data access requests related to CCTV:

Data Protection Team
Wembley National Stadium Ltd
PO Box 1966
London
SW1P 9EQ

Email: DataProtection@TheFA.com
Phone: (via Wembley Stadium Main Line – specify Data Protection)

If your query relates to event‑specific safety operations, please identify the event and approximate time of the incident to support your request.

Updates to This Notice

We may update this notice to reflect operational changes, legal updates, or new technologies. The latest version will always be available on the Wembley Stadium website.