Security and investigation compliance checklist
Use this checklist to confirm you have met every regulatory obligation that applies to your security or investigation …
Premises security
UK-wide
Secure your business premises
Security requirements for business premises including CCTV compliance, SIA licensing, and physical security measures.
Guide summary
Register with the ICO and pay the annual fee if you use CCTV that captures people. Put up signs at all entrances. Check your security staff have an SIA licence (from 1 April 2026, £204 for 3 years). Fit locks, alarms, and lighting as your insurance policy requires.
- Register with the ICO if you use CCTV (fees from £52/yr)
- Display CCTV signage at all entrances to surveillance areas
- Keep CCTV footage for no longer than 30 days
- Respond to data subject requests within 1 month
- Conduct a DPIA for monitoring public areas or facial recognition
- Check security staff hold an SIA licence (£204, valid 3 years)
- Apply for SIA licences 25-30 working days before they start
- Fit BS3621 locks on external doors for insurance compliance
- Install intruder alarms and adequate external lighting
- Check your insurance policy for specific security requirements
On this page
Related guides in Premises & Operations
Passenger lift compliance for building owners
How to comply with lift safety requirements if you own or manage a building with passenger lifts. Covers …
Lighting requirements for business premises
Key lighting requirements for business premises, covering workplace lighting standards under the Workplace Regulations 1992, emergency lighting duties, …
Building services compliance: what you need to know
A strategic overview of building services compliance obligations for UK business premises. Explains what building services are, which …
Electrical installations and Part P compliance
Understanding Part P of the Building Regulations, BS 7671 (IET Wiring Regulations), notifiable versus non-notifiable electrical work, competent …
Keeping your business premises secure protects your staff, customers, and assets. Some security measures have legal requirements you must follow.
CCTV and surveillance
If you use CCTV that captures images of people, you must comply with data protection law.
ICO registration
Most organisations operating CCTV must register with the Information Commissioner and pay an annual fee.
Security staff licensing
If you employ security guards or door staff, they may need an SIA licence.
Physical security measures
Consider implementing:
- Access control - Key cards, fobs, or biometric systems for restricted areas
- Alarm systems - Intruder alarms with monitoring service
- Lighting - Adequate external lighting to deter intruders
- Locks - BS3621 locks on external doors for insurance compliance
- Safes - For cash, keys, and valuable items
Check your insurance policy for specific security requirements you must meet.