Security and investigation businesses operate under the regulatory oversight of the Security Industry Authority (SIA). The Private Security Industry Act 2001 is in force across the whole of the United Kingdom, including Northern Ireland, and makes it a criminal offence to carry out licensable security activity without a valid SIA licence or to supply unlicensed operatives. Alongside that licensing regime, every security employer has the same workplace health and safety, fire safety, insurance, equality and data protection duties as any other business.
Data protection is a particularly heavy obligation for this division. CCTV footage, body-worn video, alarm-monitoring records, access logs and investigation case files are all personal data governed by the UK GDPR and the Data Protection Act 2018. The Information Commissioner's Office (ICO) publishes specific video-surveillance guidance. The Surveillance Camera Code of Practice under the Protection of Freedoms Act 2012 (Part 2) binds only relevant authorities such as police and local authorities — for private security firms it is best-practice guidance rather than law.
Work out which rules apply
Identify the description that best fits your business. If more than one applies — for example you provide manned guarding and also install alarm systems — follow every obligation that applies.
-
Every security and investigation business
Whatever you do, start with the universal spine. Follow "Set up and run a safe security operation" for your health and safety, fire safety, employers' liability insurance, equality and data protection duties.
-
You provide manned guarding, door supervision, close protection, CVIT, CCTV operation, keyholding or alarm response
These activities require SIA licensing. Follow "Meet your security and investigation regulatory duties" for the licensing regime, the Approved Contractor Scheme, installer certification and the status of private investigator licensing.
-
You install or maintain alarm and CCTV systems
Installation and remote monitoring of alarm and CCTV systems are not SIA-licensable activities, but industry certification by NSI or SSAIB is effectively mandatory for police-response and insurer requirements. Follow "Meet your security and investigation regulatory duties" for the certification regime.
-
Confirm you have covered everything
Whatever you do, finish with the security and investigation compliance checklist to confirm your obligations are met before you begin or continue trading.
Legal basis
Primary legislation and key regulations
Browse UK legislation (opens in a new tab) legislation.gov.uk