David Smith, the deputy information commissioner, said: "Installing surveillance in pubs to combat specific problems of rowdiness and bad behaviour may be lawful, but blanket measures where there is no history of criminal activity is likely to breach data protection requirements."