Secure your business premises

Keeping your business premises secure protects your staff, customers, and assets. Some security measures have legal requirements you must follow.

CCTV and surveillance

If you use CCTV that captures images of people, you must comply with data protection law.

CCTV and surveillance compliance

Legal requirements for operating CCTV and surveillance systems in business premises.

Legal basis: UK GDPR Article 6 lawful basis required (typically legitimate interests)
Signage: Mandatory at all entrances to surveillance areas
Retention period: ICO recommends 30 days (delete unless needed for investigation)
Subject access requests: Must respond within 1 month
DPIA required: Yes, for systematic monitoring of public areas or facial recognition

Signs must include:

Statement that CCTV is in operation
Purpose (e.g., crime prevention, safety)
Contact details for further information

Any organisation operating CCTV that captures images of identifiable individuals is a data controller and must comply with UK GDPR.

ICO CCTV guidance

ICO registration

Most organisations operating CCTV must register with the Information Commissioner and pay an annual fee.

ICO data protection registration fees

Annual fees for registering with the Information Commissioner's Office.

Tier 1 (micro organisations): GBP 52/year (max 10 staff, under GBP 632K turnover)
Tier 2 (small/medium): GBP 78/year (under 250 staff, under GBP 44M turnover)
Tier 3 (large): GBP 3,763/year (250+ staff or GBP 44M+ turnover)
Effective date: From February 2025
Exemptions: Some charities and public authorities exempt

Most organisations processing personal data must register with the ICO and pay an annual fee. The tier depends on your staff numbers and turnover.

ICO data protection fee

Security staff licensing

If you employ security guards or door staff, they may need an SIA licence.

Security guard licensing (SIA)

Requirements for employing security staff or obtaining SIA licence for door supervision and security guarding.

Licence fee: GBP 184
Validity: 3 years
Processing time: 25-30 working days (standard)
Fast track: Available for additional fee
Identity check: Required (biometric or at Post Office)

SIA licence required for:

Door supervision (bouncers)
Security guarding
Close protection (bodyguards)
CCTV public space surveillance
Key holding
Cash and valuables in transit

When not required: In-house security staff who only guard their employer's premises, provided they don't carry out door supervision activities.

Apply for an SIA licence

Physical security measures

Consider implementing:

Access control - Key cards, fobs, or biometric systems for restricted areas
Alarm systems - Intruder alarms with monitoring service
Lighting - Adequate external lighting to deter intruders
Locks - BS3621 locks on external doors for insurance compliance
Safes - For cash, keys, and valuable items

Check your insurance policy for specific security requirements you must meet.

Business crime prevention

Legal basis

Business Context Testing

Content Graph

Guvnor

Secure your business premises

CCTV and surveillance

ICO registration

Security staff licensing

Physical security measures

Compliance Assistant

🧪 Business Context Testing

◉ Content Graph

CCTV and surveillance

ICO registration

Security staff licensing

Physical security measures

Related guides in Premises & Operations

Business Context Testing

Content Graph