Defence, Security & Space

Which security and investigation rules apply to your business

Security and investigation businesses — manned guarding, door supervision, close protection, CVIT, CCTV operators, keyholding, alarm response, alarm and CCTV installers, and private investigators — share the same workplace-safety foundation, then the rules diverge by whether your activity is licensable under the Private Security Industry Act 2001 or subject to industry certification.

UK-wide
On this page
UK-wide

Related guides in Compliance & Legal

Set up security staff training

How to establish and manage ongoing training for private security employees. Covers initial SIA qualifications, mandatory refresher training, …

SIA employer compliance checklist

Compliance audit checklist for private security employers. Covers SIA licensing, refresher training, first aid, DBS checks, right to …

Security staff onboarding checklist

Pre-deployment checklist for onboarding new private security employees. Covers SIA licence verification, DBS checks, right to work, site-specific …

Security and investigation businesses operate under the regulatory oversight of the Security Industry Authority (SIA). The Private Security Industry Act 2001 is in force across the whole of the United Kingdom, including Northern Ireland, and makes it a criminal offence to carry out licensable security activity without a valid SIA licence or to supply unlicensed operatives. Alongside that licensing regime, every security employer has the same workplace health and safety, fire safety, insurance, equality and data protection duties as any other business.

Data protection is a particularly heavy obligation for this division. CCTV footage, body-worn video, alarm-monitoring records, access logs and investigation case files are all personal data governed by the UK GDPR and the Data Protection Act 2018. The Information Commissioner's Office (ICO) publishes specific video-surveillance guidance. The Surveillance Camera Code of Practice under the Protection of Freedoms Act 2012 (Part 2) binds only relevant authorities such as police and local authorities — for private security firms it is best-practice guidance rather than law.

Work out which rules apply

Identify the description that best fits your business. If more than one applies — for example you provide manned guarding and also install alarm systems — follow every obligation that applies.

  1. 1

    Every security and investigation business

    Whatever you do, start with the universal spine. Follow "Set up and run a safe security operation" for your health and safety, fire safety, employers' liability insurance, equality and data protection duties.

  2. 2

    You provide manned guarding, door supervision, close protection, CVIT, CCTV operation, keyholding or alarm response

    These activities require SIA licensing. Follow "Meet your security and investigation regulatory duties" for the licensing regime, the Approved Contractor Scheme, installer certification and the status of private investigator licensing.

  3. 3

    You install or maintain alarm and CCTV systems

    Installation and remote monitoring of alarm and CCTV systems are not SIA-licensable activities, but industry certification by NSI or SSAIB is effectively mandatory for police-response and insurer requirements. Follow "Meet your security and investigation regulatory duties" for the certification regime.

  4. 4

    Confirm you have covered everything

    Whatever you do, finish with the security and investigation compliance checklist to confirm your obligations are met before you begin or continue trading.

Official sources

Authoritative starting points for security and investigation businesses.