California HOA Security Camera Laws: a board's plain-English guide

Overview

California gives HOAs broad authority to protect common areas, but it also has some of the strongest privacy statutes in the country. The boards that navigate cameras and ALPR well treat them less as a hardware purchase and more as a policy decision — written rules, narrow access, short retention, and clear notice to residents. This guide summarizes the rules that matter most when you are evaluating, piloting, or operating surveillance in a California association.

This is operational guidance, not legal advice. Adapt every recommendation to your governing documents and run final policies past association counsel.

Laws that apply

• Davis-Stirling Common Interest Development Act (Civil Code §§4000–6150) — the board's authority to manage common areas, adopt rules, and govern association records.
• California Constitution, Article I §1 — the inalienable right to privacy that California courts apply to private actors, including HOAs.
• Penal Code §632 — two-party consent for confidential communications; the reason most HOA cameras run video-only.
• Penal Code §647(j) — criminalizes recording where someone has a reasonable expectation of privacy (bathrooms, dressing areas, the interior of a unit).
• Civil Code §1798.90.5 et seq. — ALPR-specific rules: published usage and privacy policy, security safeguards, retention limits, access controls, and audit logs.
• CCPA / CPRA (Civil Code §1798.100 et seq.) — usually does not apply to a typical HOA below the thresholds, but vendors that process footage on your behalf often do.

Common areas vs. units

The legal line California courts draw is the reasonable expectation of privacy. In common areas where members and guests are visible to anyone passing through — entries, parking lots, mail rooms, pool decks, clubhouses, gym floors — an association can generally record video with proper notice. In areas where someone undresses, uses the restroom, or is inside a unit or a fenced private yard, recording is off-limits.

Practical implications for the board:

• Aim cameras at common-area circulation, never into units, balconies, or windows.
• Use privacy masking in the camera software to block any private area that creeps into a wide-angle shot.
• Document the field-of-view for every fixed camera in your policy.

ALPR (Automated License Plate Readers)

California's ALPR statute is the strictest part of the picture. Before an association turns on an ALPR camera, Civil Code §1798.90.51–.53 requires a written usage and privacy policy that covers:

• The authorized purposes for collecting plate data.
• Who may access the system and under what conditions.
• How long data is retained and how it is destroyed.
• Security safeguards against unauthorized access.
• An audit log of every query and a process for reviewing it.
• How the policy is made available to the public.

A defensible default: a 30-day retention ceiling, a single named operator, no sharing outside lawful law-enforcement requests, and a monthly audit-log review reported in board minutes.

Signage & notice

California does not specify exact sign dimensions for private property cameras, but "conspicuous" notice is the standard. Two layers work well:

1. Property-edge signage at vehicle and pedestrian entries announcing that the community uses video surveillance and ALPR.
2. Point-of-camera signage at meaningful coverage zones (pool, clubhouse, mail room) so residents understand which spaces are monitored.

Pair signage with a written surveillance policy delivered through your normal rule-change notice process under Civil Code §4360.

Retention & access

Retention is where most boards get into trouble — either by keeping footage indefinitely "just in case" or by leaving access wide open to multiple vendors. A governance-first default:

• 30-day rolling retention for routine video and ALPR data.
• No facial recognition turned on at the camera or in cloud processing.
• Role-based access: a named operator plus a documented backup, no shared logins.
• Audit logs for every view, export, or deletion, reviewed monthly.
• Litigation hold process to preserve specific footage on lawful request.

Records requests

Davis-Stirling §§5200–5240 gives members a broad inspection right over association records. Most counsel distinguish between:

• Policy records (surveillance policy, vendor contract, retention schedule, audit-log summaries) — generally available to members.
• Raw footage — typically treated as a security record with access limited to law enforcement, counsel, or members who appear in the footage and have a legitimate need, redacted where required.

Write the distinction into the policy so the board is not making it up under pressure when a request arrives.

Board policy checklist

• Authority to act is grounded in the CC&Rs or a duly adopted rule.
• Written surveillance and ALPR policy adopted at an open meeting.
• Camera map with field-of-view documented; private areas masked.
• Audio disabled unless counsel has approved a specific use case.
• Conspicuous signage at every entry and major coverage zone.
• 30-day default retention with documented exceptions.
• Named operator and backup; no shared credentials.
• Audit log reviewed monthly and noted in board minutes.
• Vendor contract with data-processing terms and breach notification.
• Records-request workflow distinguishing policy records from raw footage.

FAQ

Can a California HOA install security cameras in common areas?

Generally yes, when cameras are placed in common areas where residents do not have a reasonable expectation of privacy (entries, parking, mail areas, pool decks). The board still needs authority under the CC&Rs or a duly adopted rule, a written policy, and posted notice. Cameras must not be aimed into bathrooms, locker rooms, the interiors of units, or fenced private yards.

Do we need to tell residents we have cameras?

Yes. California Penal Code §632 and related privacy statutes treat hidden recording as a serious issue. Post conspicuous signage at every monitored entrance and publish your surveillance policy with the governing documents so residents and guests are on notice.

Can the HOA record audio?

Not by default. California is a two-party consent state under Penal Code §632. Configure cameras to capture video only and disable microphones unless counsel has approved a specific audio use case with proper notice.

Are camera recordings an association record?

Davis-Stirling (Civil Code §§5200–5240) defines association records and the member inspection right. Most associations treat raw footage as a security record with limited access, while keeping written surveillance policies, vendor contracts, and audit logs available to members on request.

Can we use Automated License Plate Readers (ALPR)?

ALPR is allowed but heavily regulated. California Civil Code §1798.90.5 et seq. requires a published usage and privacy policy, security safeguards, defined retention, access controls, and an audit trail. Many associations limit retention to 30 days and restrict access to a named operator and law enforcement on lawful request.