Secret recording by another student

The starting point: recording is not automatically unlawful

It is important to separate two situations, because the law treats them very differently. First, the act of secretly recording you. Second, the act of sharing or publishing that recording. English law does not give you a general right not to be recorded, and there is no single offence of “recording someone without consent”. Whether you have a remedy depends on what was recorded, where, how it was used, and who did it. Your best options will often turn on the content and the sharing rather than the recording itself.

Data protection

When you are identifiable in a recording, that recording is your personal data. However, purely personal or household use by another individual usually falls outside the UK GDPR and the Data Protection Act 2018 under the “domestic purposes” exemption in Article 2(2)(c). That means a student who records a conversation purely for their own private purposes generally does not breach data protection law, and you cannot force deletion simply by citing GDPR.

The position changes once the recording is uploaded, published or distributed more widely, for example posted on social media or shared in a group with a wider audience. At that point the activity can move outside the purely personal exemption, and the person may be acting as a data controller with obligations to process fairly and lawfully. In that situation you can raise the issue with them, ask for removal, and if they refuse you can complain to the Information Commissioner’s Office. Data protection is often described as the most practical tool precisely because the real harm usually comes from a recording being made findable and shareable at scale.

Misuse of private information

If the recording captured something in which you had a reasonable expectation of privacy, for example a private conversation, something in a bathroom or changing area, medical or intimate matters, or a private message, you may have a civil claim for misuse of private information. The court weighs your reasonable expectation of privacy against any competing right to freedom of expression. This is a developed area of law and can support an injunction to prevent or restrain publication as well as damages. It is more likely to succeed where the setting was genuinely private than where you were recorded in a public or shared communal space.

Harassment

Covert filming, or repeated sharing of a recording, can amount to harassment under the Protection from Harassment Act 1997 if it forms a course of conduct (broadly, on at least two occasions) that you find alarming or distressing and that a reasonable person would regard as harassment. This can give rise to both a criminal offence and a civil claim for an injunction and damages. A single recording will usually not meet the “course of conduct” threshold, but a pattern of recording, sharing, re-posting or accompanying messages might.

Criminal offences relating to intimate or sexual images

The law is much stronger where the recording is intimate or sexual. Several offences may apply:

Voyeurism under the Sexual Offences Act 2003 covers recording someone doing a private act (for example undressing, using the toilet, or a sexual act) where they would reasonably expect privacy, for the purpose of sexual gratification or to humiliate or distress.

So-called upskirting is a specific offence under the same Act, covering recording beneath a person’s clothing to capture their genitals or buttocks.

Sharing or threatening to share intimate images without consent is now covered by offences introduced and strengthened by the Online Safety Act 2023, which amended the Sexual Offences Act 2003. It is an offence to share, or threaten to share, an intimate photograph or film without consent, and the base sharing offence does not require proof of a particular intent to cause distress. This covers sexual, nude, partially nude and toilet images. If any of this applies to you, this is a matter to report to the police.

Other possibilities

If the shared recording is edited or presented in a way that conveys a false and damaging impression about you, defamation may be relevant, though this is a costly and technical route. If the recording is used to make demands of you accompanied by threats, that may involve blackmail. If it targets a protected characteristic or amounts to malicious communications or a communications offence, other criminal provisions can apply. Which, if any, of these fits depends heavily on the exact facts.

Practical steps

1. Preserve evidence. Take dated screenshots of any post, message, group or profile showing the recording being shared, and note where and when it appeared, who shared it, and who can see it. Do not delete anything on your own devices that shows what happened.

2. Report it to the platform. Most social media and messaging platforms have reporting routes for privacy violations, harassment and intimate image abuse, and can remove content quickly.

3. Use your institution’s route. If you and the other person are at the same school, college or university, this is very likely to breach their student conduct, bullying, harassment or safeguarding rules regardless of whether it also breaks the general law. Report it to the relevant welfare, safeguarding or student conduct team and ask what disciplinary and support options exist. Universities and colleges can require behaviour to stop, impose sanctions, and offer support even where the criminal threshold is not met.

4. Ask for removal. A clear written request to the person to delete and stop sharing the recording is worth making, and creates a record. Keep it factual and avoid anything that could be turned against you.

5. Contact the police if it is intimate or sexual, if there are threats, or if it forms part of harassment or stalking. If you feel unsafe, that raises the urgency.

6. Consider the ICO if the material has been published or shared beyond genuinely private use and the person will not take it down.

7. Consider civil action, such as an injunction and damages for misuse of private information or harassment, if the content is serious, ongoing and the informal routes fail. Weigh the cost, delay and stress against the likely benefit, and remember that a fast platform takedown or institutional sanction may achieve more, more quickly, than litigation.

What would change the answer

The strongest routes depend on facts you have not yet given. It matters greatly whether the recording is sexual or intimate, because that unlocks criminal offences and police involvement. It matters where you were recorded, because a private setting strengthens a privacy claim while a shared communal space weakens it. It matters whether the recording was merely made or actually shared, and how widely, because sharing is where most remedies bite. It also matters whether this happened once or repeatedly, because harassment needs a course of conduct. If you tell me the setting, the content, how it was shared, and whether you are both at the same institution, I can give you a much more targeted view of which route is likely to work best for you.