Camera-related state law

The governing audio-recording statute is the Pennsylvania Wiretapping and Electronic Surveillance Control Act, 18 Pa. C.S. Section 5701 et seq., with the consent-and-exceptions framework at Section 5704. Interception of any oral, wire, or electronic communication without the consent of all parties is a felony. PA is one of the strictest two-party consent states in the country, with appellate decisions reinforcing the all-party rule even in some workplace and quasi-public contexts.

Video-only surveillance is treated more permissively. Recording video in places where a person has no reasonable expectation of privacy is generally lawful, with two practical caveats. First, posted notice is the standard for any commercial property and many lease agreements require it. Second, hidden cameras in places where privacy is expected (restrooms, locker rooms, fitting rooms, hotel guest rooms) are off-limits and create criminal exposure under PA invasion-of-privacy theories.

Practical translation for a PA commercial install. Audio capture by a continuously running camera is high-risk and most PA installs default to video-only on the cameras. Audio is routed through a separate intercom or call-recording workflow with all-party consent disclosed.

Biometric data law

Pennsylvania does not have an enacted biometric information privacy law as of 2026. Bills modeled in part on the Illinois BIPA framework have been introduced in recent PA legislative sessions, but none have passed into law. Operators should track PA Senate and House bill activity quarterly because the legislative posture has been moving in the direction of enactment.

That doesn't mean biometric capture is unregulated in PA today. The 2022 amendment to 73 P.S. Section 2301 et seq. brought biometric information used for authentication into the personal-information definition for breach-notification purposes. The federal FTC Act and Safeguards Rule reach biometric data handling for many businesses. PA businesses using facial recognition or fingerprint access control should still document consent, retention, and access controls.

Privacy in the workplace

PA does not have a single workplace electronic-monitoring statute. The PA Wiretapping Act (18 Pa. C.S. sec. 5704) reaches secret audio recording in the workplace and is the controlling statute for employer audio capture. Pure video surveillance of common work areas with posted notice is the routine pattern. There is no single state-level requirement that the notice be in writing, but a documented workplace surveillance policy in the employee handbook is the standard practice.

Most PA employers issue a single workplace surveillance notice covering cameras, badge access, computer monitoring, and call recording together. Cameras in restrooms, locker rooms, lactation rooms, and other employee privacy areas are off-limits and create criminal and civil exposure. Cameras in production lines, retail floor, loading dock, and warehouse aisles are routine when paired with notice.

Audio capture by an employer is the high-risk variable. Continuously-running camera audio without all-party consent is a Wiretapping Act exposure. Employer call recording requires all-party consent and a documented disclosure script.

Public-place and common-area cameras

For commercial real estate, multi-tenant residential, retail, and hospitality, the practical rule set is consistent. Cameras in lobbies, hallways, exterior, parking, retail floor, and other non-private common areas are lawful with posted notice. Cameras in bathrooms, fitting rooms, hotel guest rooms, and any other space where privacy is expected are off-limits.

PA multi-tenant residential operators should also review the bylaws and lease covenants. Co-op and condo associations often have notice and access rules that go beyond state law. Hotel operators handle guest-room signage at the door and at the front desk and document any guest-area camera coverage in the property security plan. Audio in any common area is the high-risk variable: ambient audio capture without all-party consent runs into the Wiretapping Act regardless of whether the space is public or private.

Video retention requirements

PA has no single statewide video retention statute that applies to all commercial cameras. Retention is set by the regime that governs the industry.

  • Medical cannabis. The PA Department of Health publishes coverage and retention rules under 28 Pa. Code Chapter 1141. Pull the current DOH rules before designing the install.
  • Healthcare. HIPAA Security Rule (45 CFR Part 164) governs PHI-touching footage. Retention is typically 30 to 90 days at the facility, longer when an investigation is open.
  • Retail and hospitality with card data. PCI-DSS Requirement 9 specifies camera coverage of the cardholder data environment with 90-day retention.
  • Banking and finance. Federal banking regulators and the PA Department of Banking and Securities set surveillance and retention expectations.
  • Schools. FERPA applies to K-12 districts and higher education. PA Department of Education guidance and district policy add detail.
  • Federal contractors and grantees. NDAA Section 889 controls vendor selection. Retention is contractor-driven through the SSP or grant award terms.

Default retention for PA commercial systems with no specific industry rule is 30 days. Operators in higher-risk industries set longer retention with explicit written retention policies in the WISP, facility security plan, or DOH SOP.

Notable enforcement examples

PA enforcement against businesses for surveillance, data security, and privacy issues runs through several channels. The Pennsylvania Office of Attorney General has brought breach-notification enforcement actions under 73 P.S. sec. 2301 et seq. and consumer protection actions under the Unfair Trade Practices and Consumer Protection Law against businesses with documented data security failures. The PA Wiretapping Act has produced criminal and civil cases reinforcing the all-party consent rule, including in workplace contexts.

Federal HIPAA settlements have reached PA-based defendants where physical safeguards (facility access control, camera coverage of PHI areas) were a documented part of the breach. PCI assessor findings have triggered card brand penalties at PA retailers where camera coverage of the cardholder data environment was inadequate or retention was below 90 days. Real settlements are searchable on the PA OAG and HHS OCR enforcement pages.

What Tec-Tel does to comply with Pennsylvania regulations

Tec-Tel installs across Pennsylvania for retail, manufacturing, healthcare, multi-tenant residential, financial, and licensed medical cannabis customers. The default install pattern for a PA commercial site:

  • Video-only on cameras unless audio is documented with all-party consent under 18 Pa. C.S. sec. 5704.
  • Posted surveillance notice at every public entrance.
  • No cameras in restrooms, locker rooms, fitting rooms, hotel guest rooms, or other spaces where privacy is reasonably expected.
  • Retention configured to the regime that governs the industry (HIPAA, PCI, DOH, NDAA), with the facility's written retention policy attached to the install package.
  • Breach-notification readiness coordinated with the customer's privacy team for any system that captures personal information of PA residents under 73 P.S. sec. 2301 et seq.
  • NDAA Section 889-compliant vendor selection on any federal-touching install. No Hikvision, Dahua, Hytera, Huawei, ZTE, or covered OEM relabels.
  • Multi-vendor architecture so the customer is not locked into one camera or VMS line as state and federal rules evolve.

This is a buyer-facing reference, not legal advice. For a specific Pennsylvania regulatory question, work with your privacy counsel.

Security service in Pennsylvania

Tec-Tel deploys AI-era security across Pennsylvania with one accountable project manager owning design, install, and service to one standard. The cities below have local service detail, deal sizing, and a free consultation. Don't see yours? We cover the whole state.

Or browse the full city directory and nationwide coverage map.