Privacy notices are required under the European Union’s General Data Protection Regulation even if your data processing is video surveillance/CCTV.
The Romanian Data Protection Authority issued a fine against a company for failing to provide adequate notice of data processing in connection with CCTV video surveillance in violation of Article 12 of the GDPR.