Under GDPR , individuals capturing images beyond their property boundary must have a legitimate reason, provide clear notice (such as signs), and avoid capturing more data than necessary. In some countries, like Germany, secret recordings are illegal.