Many organisations use CCTV as part of their security or safeguarding measures. However, CCTV systems create their own set of data protection obligations under the UK GDPR, the Data Protection Act 2018, and ICO guidance. 

If your business operates CCTV, you must ensure that the system is used lawfully, fairly, and transparently 

— and that individuals’ rights are protected.

We provide clear, practical guidance to help you meet these requirements and avoid common compliance pitfalls.

What’s Included

CCTV Policy & Procedures

A tailored CCTV policy outlining how your system is used, who can access footage, how long recordings are kept, and how requests for footage are handled.

Signage Requirements

Advice on the legally required signage, including what information must be displayed and where signs should be placed.

Retention & Access Rules

Guidance on how long CCTV footage should be stored, how to manage access, and how to respond to requests from individuals or authorities.

Data Protection Impact Assessment (DPIA)

Where required, we can complete a DPIA to assess risks and ensure your CCTV use is justified, proportionate, and compliant.

Staff Guidance

Clear instructions for staff on how to operate the system responsibly and in line with data protection law.