Privacy notices are  required under the European Union’s  General Data Protection Regulation even if your data processing is video surveillance/CCTV.

The Romanian Data Protection Authority issued a fine against a company for failing to provide adequate notice of data processing in connection with CCTV video surveillance in violation of Article 12 of the GDPR.

Full text of the opinion.