Division 80
Security & Investigation
Requirements for all security & investigation
These requirements apply to all business activities in this division.
Health and Safety at Work etc. Act 1974 — general duties
Enforced by HSE
Health and Safety at Work etc. Act 1974
General duty to protect employees and others affected by the business — lone-working security officers, control-room staff, installers working at height or near electrical systems, and members of the public on guarded premises.
Employers' Liability Insurance
Enforced by HSE
Employers' Liability (Compulsory Insurance) Act 1969
Required for any business employing at least one person.
UK GDPR + Data Protection Act 2018
Enforced by ICO
Data Protection Act 2018; UK GDPR (retained EU law)
Heavy obligation for this industry — CCTV footage, body-worn video, alarm-monitoring records, access logs and investigation case files are all personal data. This is the binding privacy regime for security and investigation work, and the ICO publishes specific video-surveillance guidance. The statutory Surveillance Camera Code of Practice (Protection of Freedoms Act 2012, Part 2) binds only 'relevant authorities' (police, local authorities), so for private security firms it is best-practice guidance rather than law. ICO registration is required unless specifically exempt.
Equality Act 2010 — protected characteristics
Enforced by EHRC
Equality Act 2010
No discrimination, harassment or victimisation across the nine protected characteristics — relevant in entry/refusal decisions by door supervisors and in the provision of guarding services to the public, as well as in employment.
Regulatory Reform (Fire Safety) Order 2005
Enforced by LOCAL_FIRE_AUTHORITY
Regulatory Reform (Fire Safety) Order 2005
The 'responsible person' for any non-domestic premises (offices, control rooms, monitoring centres, training sites) must carry out a fire risk assessment and maintain fire safety arrangements. Devolved variants: Fire (Scotland) Act 2005; Fire and Rescue Services (NI) Order 2006.