Alex wrote:

But the DPA requires that CCTV usage is signposted "Images are being

The most relevant bit is; "...I then moved the camera to my
bedroom...". The lodger wasn't invited into the OP's bedroom & if he
wants cameras in his bedroom, that's his business.