The Data Protection Act 1998 would require that any information gathered is with your knowledge and consent. (For the purpose here that's all you need to know of this act.) In order that you are aware, they will have needed to place signs, along the lines of "CCTV operates in this area for the purpose of...(e.g.: crime detection/prevention.) The same thing applies everywhere, keep your eyes open and you'll see; Tesco petrol stations etc. If they have not done this, then you can apply to have the tapes made available to view to see if any privacy has been breached. Even placing a dictaphone in a law lecture technically requires the lecturer's (& the attendees) approval. By placing the signs in the canteen (assuming they have), you can be legally assumed to have read them, and by entering the area you are inplicitly accepting the terms and they are therefore able to record you. On a technical point, anyone could put cameras anywhere on their property. It only becomes an issue when they then actually record. Hope this helps.