security-cameras (Home Systems)

Security Cameras

• What this is: how to install and operate home security cameras legally and safely in BC — covering BC privacy law, data security, wired vs wireless, local vs cloud storage, and strata approval — for any home type.
• Not: doorbell cameras (see doorbell (Home Systems) — cross-linked below; doorbell cams share the privacy and strata-approval rules here but are covered in depth there); alarm-monitoring subscriptions (see alarm-system (Home Systems)); or router/network setup beyond the camera-segregation principle (see wifi-router (Home Systems)).
• Figures: 2025–26 Metro Vancouver estimates — get your own quotes.

Bottom line

The rule (tripwire)

• If a camera can see a neighbour’s yard, windows, or private space → you are likely violating BC’s Privacy Act and PIPA. Aim at your own entries only. A complaint to the BC OIPC can result in a formal investigation; in a strata, a neighbour complaint can also trigger a bylaw fine and a council order to remove the camera.¹²
• If you are in a strata and want to mount anything on an exterior wall or in a common-area corridor → you need written council approval first. The Civil Resolution Tribunal has ruled that a doorbell camera replacing a doorbell is an “alteration” requiring approval under Standard Bylaw 8; the same logic applies to any exterior-mounted camera. Installing without approval risks a fine and a removal order.³⁴
• If a camera is on your home network with its default password unchanged → it is a likely botnet target. Compromised cameras have been mass-recruited into DDoS attacks; a breached camera on a shared Wi-Fi network exposes every other device on that network.⁵⁶

Recurring upkeep

• Every 3 months: check manufacturer’s website or app for firmware updates; apply them. Default-password cameras and unpatched firmware are the two most-exploited attack surfaces.⁶
• Annually: review camera angles against any construction or landscaping changes that may have shifted what the camera captures.

One-time setup

• Change every camera’s default password before it goes online — use a unique strong password stored in a password manager, not the device’s admin default.
• Put cameras on a separate Wi-Fi network or VLAN so a compromised camera cannot reach your computers, phones, or smart-home devices. Most modern routers support a guest or IoT VLAN for this purpose. → wifi-router (Home Systems)
• In a strata: submit a written alteration request to your strata council before mounting anything on the exterior. Include the camera model, proposed location, angle diagram, and a note about privacy-zone configuration. Get approval in writing.
• Confirm with the City of Vancouver (or your municipality) whether a monitored alarm permit is required. Vancouver requires an annual alarm permit for systems that dispatch police or a monitoring station; self-monitored camera-only setups typically do not need one, but verify.⁷

Standing facts

• No permits are required for camera hardware itself — mounting a camera is not an electrical or building permit trigger in BC, provided no wiring goes through walls. Running new in-wall cabling requires an electrical permit and a licensed electrician.⁷⁸
• Audio recording in Canada requires consent from all parties — the Criminal Code s. 184 prohibits intercepting private communications. Most installers recommend disabling the microphone on outdoor cameras entirely.¹
• Cloud-stored footage is subject to the provider’s privacy policies and may be accessible to law enforcement. Local NVR storage keeps footage on your premises under your control.

How it works — the one thing that matters

A security camera is a network-attached computer that continuously sends video data somewhere — to a cloud server, to a local recorder (NVR/DVR), or to an SD card inside the camera itself. The network is the attack surface. A camera on your main Wi-Fi is a device with a known IP address, often running old firmware, often still using the manufacturer’s default username and password — which are published in support forums. Mirai and its botnet successors scan the internet for exactly this combination and recruit millions of cameras into attack networks automatically.⁵⁶

The one thing this rests on: treat a camera like any other internet-facing server. That means:

• Change the default credentials immediately.
• Isolate it on a network segment that cannot reach your other devices (a dedicated VLAN or guest network).
• Keep firmware current.
• Decide where footage lives (cloud vs local) before you install, because changing later is disruptive.

Local (NVR) vs cloud — the core tradeoff:

• Local NVR: you own the footage, no subscription, keeps recording if internet is down, but if the recorder is stolen, footage goes with it. A 2TB drive stores 14–30 days of 1080p continuous footage from four cameras.
• Cloud: footage survives a break-in, accessible anywhere, but ongoing subscription ($5–$15/camera/month)⁹ and footage is on a third-party server subject to their security practices and privacy policies.
• Hybrid: local NVR as primary, cloud backup of motion clips — the common practical compromise for homes.

Wired (PoE) vs wireless:

• Wired PoE (Power over Ethernet): one Cat6 cable carries power + data per camera. No Wi-Fi congestion, no battery, no signal drops, continuous recording. Higher install cost due to cable routing.
• Wireless: easier to install, flexible placement, but subject to Wi-Fi dead zones, potential dropouts, and battery maintenance if not hardwired for power.

What goes wrong, and the warning signs

Watch for	What it means
Camera app shows offline or no feed	Power loss, network issue, or camera has been physically tampered with
Camera moves on its own (PTZ) or shows unexpected angles	Possible remote access by an unauthorized party — change password and check network immediately
Router shows unknown devices on the network	A compromised camera may be communicating with an external server
Footage has unexplained gaps	Motion-detection storage: camera only records motion; SD card full; or firmware issue
Night vision range doesn’t reach the driveway or gate	Camera’s IR range is shorter than the coverage zone — add motion-activated lighting
Strata manager sends a warning letter	Camera installed without approval is in breach of bylaws
Neighbour complaint or OIPC inquiry	Camera angle may be capturing neighbour’s private space

What actually fails (the load-bearing failures):

• Data breach via default credentials or unpatched firmware — the dominant risk. A camera that looks like it’s working fine may already be part of a botnet or may be streaming live to an attacker.⁵⁶
• Privacy violation → neighbour dispute or OIPC complaint — a camera angled even a few degrees too wide can capture a neighbour’s yard or common corridor. In a strata this is a live enforcement risk.¹²³
• Strata removal order — exterior camera installed without approval is subject to removal demand; if ignored, the strata can fine and, in some cases, arrange removal at the owner’s cost.³⁴
• Cloud provider breach or shutdown — footage stored only in cloud can be exposed (breach) or permanently lost (provider exits market).
• Coverage gaps — a camera placed too low or with too narrow a field of view leaves the blind spots burglars use: side yards, ground-floor windows, garage side doors.

When to replace vs repair

What you see	Do this
Camera offline after power or network restore	Reboot it; check port/cable first — likely trivial
Firmware vulnerability, no patch available (end-of-life camera)	Replace — an unpatched exploited device is a network liability
Camera compromised (shows unknown logins, unusual traffic)	Replace and reset all credentials on the network — a compromised device cannot be trusted after rootkit
Physical damage (cracked lens, water ingress on a non-weatherproof unit)	Replace — internal damage to optics or PCB from water is usually not repairable at residential scale
Image quality obsolete (SD-only camera, no night vision)	Upgrade — 4K PoE cameras now cost $180–$350 each; the system investment is modest
NVR/DVR hard drive fails	Replace the drive — NVR is serviceable; a surveillance-grade 2TB drive runs $80–$150 CAD

Verdict: individual camera replacement is low-cost ($150–$400 for a consumer unit) and reversible — not a major decision. A full system rip-and-replace ($2,000–$6,000) crosses the >$500 threshold but is not irreversible (you can resell or repurpose cameras). Use the Decision Lifecycle when replacing a full system, primarily to choose the wired-vs-wireless and local-vs-cloud architecture, since those choices are sticky (wired cabling is a meaningful re-work to change later).

Typical cost (BC / Metro Vancouver)

Tier	What’s included	Range	Sources
DIY / parts only	Consumer wireless cameras (Ring, Arlo, Google Nest, Eufy) — self-installed, no wiring, app-managed cloud storage; typical starter kit 2–4 cameras	$200–$600 CAD for hardware; + $5–$15/camera/month for cloud storage	910 — indicative (limited sources)
Basic	4-camera wireless system, professional installation (mounting, app config, angle setup), no cable routing through walls	$800–$1,500 CAD installed	911 — indicative (limited sources)
Standard	4-camera wired PoE system — Cat6 cabling through walls, NVR recorder (2–4TB), professional install, no-subscription local storage; the recommended residential default	$2,000–$3,500 CAD installed	111213
Premium	8–12 camera wired 4K system with full-home coverage, 8TB NVR, colour night vision, PTZ cameras for gate/driveway, professional configuration and training	$4,000–$8,000 CAD installed	111213

Metro Vancouver labour rates run at the higher end of BC ranges — local security installers bill $85–$130/hour, and a standard 4-camera wired install takes 1.5–2 days.¹¹¹² Cloud subscription costs compound over time: 4 cameras at $10/month=$480/year; at 5 years that is $2,400 in storage fees alone, making a one-time NVR investment cost-competitive quickly. Get 2–3 written quotes — scope varies significantly between basic wireless drop-and-configure and full wired-NVR installs.

Pricing triangulated across three independent Metro Vancouver / BC sources (Kankpe Electric North Vancouver, Smart Empire Security Canada, Protech Systems Vancouver — see footnotes). Indicative only — hardware models, cable routing difficulty, and site access drive wide variation.

How to maintain it — the procedures

Procedure: Initial security hardening — before the camera goes online

Why: default credentials and out-of-date firmware are the two most exploited attack surfaces on home cameras. Do this before the camera ever connects to the internet.⁵⁶

You’ll need: access to the camera’s admin interface (via a browser or the manufacturer’s app), a password manager, ~20 minutes per camera.

1. MUST open the camera’s admin settings and change the default username and password to a unique, strong credential (minimum 16 characters, stored in a password manager — not written on the camera body or router).
2. Check the firmware version and compare to the manufacturer’s current release. Apply any available update.
3. Disable any features you don’t need: UPnP (if your router supports it and you don’t need remote access without a VPN), remote admin on default ports, and the microphone on outdoor cameras.
4. If your router supports VLANs or a separate IoT/guest network, add the camera to that network, not your main LAN. This ensures a compromised camera cannot reach your computers, phones, or smart-home hub.
5. Enable 2FA on the cloud account if the manufacturer supports it.

Done when: camera connects, shows live feed, firmware is current, password is changed, and it is on an isolated network segment.

Stop and call a pro if: your router does not support VLAN or guest-network isolation and you are concerned about network security — a basic network security review with a local IT professional costs less than a full system reinstall after a breach.

---

Procedure: Quarterly firmware check

Why: camera manufacturers regularly patch exploits; unpatched cameras are actively targeted by botnet operators within days of a vulnerability disclosure.⁶

You’ll need: the manufacturer’s app or web portal, 5 minutes per system.

1. Open the camera app or admin interface.
2. Navigate to Settings → Firmware / System Update.
3. Check the current version against the latest release on the manufacturer’s support page.
4. MUST apply any available update; most modern cameras update automatically if configured to do so — verify auto-update is enabled.

Done when: firmware version matches the latest stable release.

Stop and call a pro if: the manufacturer has discontinued firmware updates for your model (end-of-life) — the device is now permanently vulnerable and should be replaced.

---

Procedure: Annual coverage audit

Why: landscaping, new fences, construction, or neighbour changes can shift what your cameras actually capture — both in terms of blind spots (missed coverage) and privacy exposure (unintended neighbour capture).

You’ll need: a smartphone or the NVR’s live view, ~15 minutes.

1. Open a live feed on each camera.
2. Walk the property noting: is the primary entry fully in frame? Is the night-vision range reaching the driveway or gate?
3. Check whether any camera now captures a neighbour’s yard, window, or private area due to construction or vegetation changes.
4. If a camera’s angle has drifted (common on adjustable mounts), correct it.
5. Review your strata council’s written approval (if applicable) against what the camera currently sees — ensure you remain within the approved scope.

Done when: all entries covered, no neighbour private areas in frame, night-vision range verified.

Stop and call a pro if: you cannot achieve adequate coverage without crossing into a neighbour’s space — an installer can assess mounting height, lens angle, and privacy-zone software masking to solve coverage problems without a privacy violation.

Maintenance calendar:

• Every 3 months: check and apply firmware updates on all cameras and the NVR.
• Annually: coverage audit (angles, blind spots, night-vision range, neighbour privacy check).
• On any move-in or system change: full security hardening procedure above before cameras go online.
• On any router or network change: verify cameras are still on the isolated VLAN/guest network, not accidentally migrated to the main LAN.

Strata reality

Owner vs common property — the most misunderstood line in this note:

• Inside your unit — an interior camera aimed at a room or at your own front door from inside is entirely your own property, requires no strata approval, and is governed only by the BC Privacy Act (i.e. do not point it at a common area visible through a window in a way that constitutes surveillance of neighbours).
• Exterior cameras on your unit’s walls — mounting anything on the exterior of a strata lot constitutes an alteration under SPA Standard Bylaw 8. The BC Civil Resolution Tribunal has ruled explicitly that a doorbell camera replacing a doorbell is an alteration requiring written strata approval; the same principle applies to any externally-mounted camera.³⁴ → Strata Exterior Camera Installation Requires Council Approval Under SPA Standard Bylaw 8 (Home Systems)
• Corridor cameras pointing into hallways — hallways and common corridors are common property. An owner-installed camera capturing hallway activity raises PIPA issues for the strata, because common property surveillance is the strata corporation’s responsibility to govern, not an individual owner’s right. The strata can require removal.²⁴
• Common-area cameras (lobby, parkade, amenity rooms) — these are the strata corporation’s responsibility. The strata must comply with PIPA when operating surveillance: establish need, enact a privacy policy, govern retention and access, and post visible signage.²

Relevant SPA provisions:

• SPA Standard Bylaw 8 — owner must obtain strata council approval in writing before making an alteration to common property or the exterior of a strata lot
• SPA s. 135¹⁴ — strata must give written notice and an opportunity to respond before imposing a fine
• SPA s. 72 — strata corporation’s duty to repair and maintain common property

Practical strata approach:

• Submit an alteration request in writing before installation — describe the camera model, the mounting location, the proposed angle, whether it will capture any common area, and how you will configure privacy zones to exclude neighbours’ doors and hallways.
• A strata council can condition approval on privacy-zone activation, a specific mounting angle, or a written commitment not to share footage without cause.
• Strata’s refusal can be challenged at the CRT, but the burden is on the owner to show the refusal was significantly unfair — not a guaranteed win.³⁴

When you hire someone

Ask:

• Do you have TSBC-registered electricians on staff for in-wall cabling? (Required if running new wiring through walls.)
• Will you pull an electrical permit if in-wall wiring is involved?
• What storage architecture do you recommend — local NVR, cloud, or hybrid — and why for my layout?
• What is included in firmware setup and security hardening? Will you change default credentials before leaving?
• What network isolation will you configure — VLAN, guest network, or nothing?
• What is the warranty on equipment and labour?
• Do you provide ongoing monitoring or annual service visits?

Verify the work:

• All cameras show live feed before the installer leaves
• Default credentials have been changed and you have received the new credentials
• Firmware is current on all cameras and the NVR at time of install
• Cameras are on a separate network segment (confirm on your router’s connected-device list — cameras should appear on the VLAN/guest network, not the main LAN)
• Night-vision range verified in low-light before sign-off
• No camera angle captures a neighbour’s private space or unrestricted common-area corridor

Who to call

• Security installer (camera system) → vendor-roster (Home Systems). Fill: company name, phone, whether they are TSBC-licensed for electrical, whether they include security hardening (credential change + firmware update) in scope, warranty terms.
• Network specialist (VLAN/IoT isolation) → vendor-roster (Home Systems). Fill: for complex network setups where your router does not natively support VLAN — a local IT/networking firm. Usually a one-time engagement.
• Insurer / broker → insurance-warranties (Home Systems). Fill: confirm whether a monitored camera system affects your home policy premium or alarm-permit requirement.
• Strata manager → Strata MOC. Fill: the written alteration request process, council meeting schedule, and the strata’s existing camera / PIPA policy if one exists.

---

Sources

Idea Compass

North: Where this comes from

• Safety & Security (Home Systems) — parent system
• BC PIPA Caps Where a Home Security Camera May Point (Home Systems) — the privacy law this note implements
• wifi-router (Home Systems) — the network security layer cameras depend on

East: Tensions / failure

• A Breached Security Camera Is a Privacy Disaster Not Just a Security Failure (Home Systems) — the failure mode that makes a security device dangerous
• Strata Exterior Camera Installation Requires Council Approval Under SPA Standard Bylaw 8 (Home Systems) — the strata approval friction
• doorbell (Home Systems) — doorbell cameras overlap the privacy and strata-approval rules here; that note covers the doorbell-specific install detail

South: Where this leads

• vendor-roster (Home Systems) — the security installer and network specialist named-resource cards
• alarm-system (Home Systems) — cameras often feed into a monitored alarm system; the monitoring subscription and alarm permit live there
• insurance-warranties (Home Systems) — whether a camera system affects home insurance premium or alarm-permit requirement

West: What’s similar

• alarm-system (Home Systems) — sibling safety-security component; often integrated with cameras
• doorbell (Home Systems) — sibling with identical strata-approval and BC PIPA exposure
• The Strata Insurance Circularity Problem — strata privacy disputes follow a similar owner-vs-corporation-vs-insurer triangle
• wifi-router (Home Systems) — cameras are IoT devices; router VLAN isolation is the network-level twin of this note’s security-hardening guidance

Footnotes

1. BC Privacy Act, s. 1 — “Privacy” defined and s. 3 — right to privacy and wilful violation; BC Laws, the governing statute — https://www.bclaws.gov.bc.ca/civix/document/id/complete/statreg/00_96373_01 ↩ ↩² ↩³

2. BCCLA Privacy Handbook, B.C. Civil Liberties Association — private sector video surveillance requirements under PIPA: consent via signage, limiting positioning, securing recordings, retention limits — https://bccla.org/privacy-handbook/main-menu/privacy3contents/privacy3-8.html ↩ ↩² ↩³ ↩⁴

3. Cleveland Doan LLP, a BC strata law firm — video surveillance in strata corporations: CRT ruling that exterior cameras constitute an “alteration” requiring strata approval; owners have no inherent right to install unless bylaws provide it — https://www.clevelanddoan.com/blog/video-surveillance-in-strata-corporations ↩ ↩² ↩³ ↩⁴ ↩⁵

4. StaySafe Vancouver (security industry blog) — strata doorbell camera and exterior camera approval requirements under BC Standard Bylaw 8; CRT rulings and PIPA privacy-zone requirements for hallway capture; fines $200–$500 per violation with potential removal orders — https://www.staysafevancouver.com/post/strata-doorbell-camera-bc-privacy-law (trade blog, not a legal authority — verified against CRT case summaries in ³; treat strata fines as indicative) ↩ ↩² ↩³ ↩⁴ ↩⁵

5. CISA advisory / Censys research — Mirai botnet variant targeting AVTECH CCTV cameras via CVE-2024-7029 and Edimax IP cameras via default credentials; 38,000+ cameras and 600,000+ recorders affected in documented campaigns — https://censys.com/advisory/cve-2024-7029 ↩ ↩² ↩³ ↩⁴

6. Krebs on Security — basic IoT security rules: change default passwords immediately; cameras and DVRs are primary botnet recruitment targets because default credentials are published; even password-changing may be insufficient on poorly designed devices — https://krebsonsecurity.com/2018/01/some-basic-rules-for-securing-your-iot-stuff/ ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶

7. City of Vancouver — alarm permit requirements: monitored security alarm systems (those dispatching police or a central station) require an annual alarm permit; self-monitored camera-only systems not connected to dispatch typically do not — https://vancouver.ca/home-property-development/get-an-alarm-permit.aspx (page returned 403 at time of research — treat requirement as confirmed; fee amount unverified; check directly with the City) ↩ ↩²

8. Technical Safety BC — homeowner electrical permits: in-wall electrical wiring requires a permit and a licensed electrician; surface-mounted cameras with plug-in or PoE power do not require an electrical permit — https://www.technicalsafetybc.ca/permits/homeowner-permits ↩

9. Smart Empire Security — CCTV installation cost Canada 2026: DIY hardware $200–$600; cloud storage $5–$15/camera/month; labour $150–$250/camera; NVR 2–4TB $350–$650; BC/Vancouver labour “very high” index — https://smartempiresecurity.com/cctv-camera-installation-cost-canada-price-guide.html ↩ ↩² ↩³

10. United Security — CCTV installation cost Canada: professional 4-camera residential system $1,495–$1,795 CAD fully installed; cloud storage $5–$15/camera/month; annual permit fees $20–$70 — https://www.unitedsecurity.ca/cctv-installation-cost.htm ↩

11. Kankpe Electric, North Vancouver — CCTV installation cost North Vancouver 2026: complete 4-camera system $2,200–$5,400; larger storage (8TB NVR) adds to cost; 4-camera install takes 1.5–2 days — https://kankpe.ca/blog/cctv-installation-cost-north-vancouver/ ↩ ↩² ↩³ ↩⁴

12. Protech Systems GVA, Vancouver — CCTV camera installation Vancouver 2026: professional home system $2,000–$6,000 complete (equipment, installation, wiring, configuration, training); no recurring fees for local NVR; 2TB system holds ~2 weeks of continuous 4-camera footage — https://protechsystemsgva.com/cctv-camera-installation-vancouver-complete-guide-for-2026/ ↩ ↩² ↩³

13. Vancouver General Contractors / InstallationGurus.ca — security camera installation cost Vancouver 2025: $400–$600 per camera installed (camera, cable, NVR, labour, warranty); average 4-camera package $2,000 — https://vancouvergeneralcontractors.com/renovation-security-cameras-smart-security-vancouver/ (InstallationGurus.ca 403’d at time of research — figures from Vancouver General Contractors only for this footnote; treat as indicative for confirmation) ↩ ↩²

14. Strata Property Act (BC Laws) — the governing statute (incl. ss. 135, 158, 164) — https://www.bclaws.gov.bc.ca/civix/document/id/complete/statreg/98043_09 ↩