CCTV Installation Checklist: A Complete Guide to Compliance and Setup

A CCTV installation checklist is a structured list of tasks that ensures your surveillance system is compliant with UK data protection law and positioned to protect your premises effectively. In simpler terms, it covers everything from registering with the ICO to planning camera placement, so nothing is overlooked during setup.

Installing a commercial CCTV system for your business can be an excellent way to bolster security and ensure your staff, premises, and equipment remain under rigorous surveillance to prevent criminal activity. However, there are a few things you need to do to ensure you are compliant with data protection legislation in the UK.

In this checklist, the Clearway team has summarised all the vital tasks when installing CCTV to ensure you are up to date with all of the requirements.

Pre-Installation Planning and Site Survey

Before any cameras are mounted, a thorough site survey helps you identify the areas that need coverage and the type of equipment required. This planning stage is where you define your security objectives and map out camera locations.

Start by walking through your premises and noting high-traffic routes, entry and exit points, car parks, loading bays, and any blind spots. Consider lighting conditions during both daytime and darkness hours, as this will influence whether you need cameras with infrared capability or additional lighting.

You should also carry out a security risk assessment to determine the specific threats your site faces. This will inform how many cameras you need, what resolution is appropriate, and whether you require specialist equipment such as mobile CCTV towers for temporary or remote sites.

For sites without mains power or fixed infrastructure, wireless CCTV systems or rapid deployment CCTV may be more practical. Planning these decisions before installation avoids costly changes later.

Risk Assess the Threat to Data Privacy

Under the UK GDPR, you are required to assess the impact your CCTV system will have on individual privacy before installation begins. This is known as a Data Protection Impact Assessment (DPIA).

A DPIA is particularly important if your cameras will capture footage of public areas, neighbouring properties, or spaces where people have a reasonable expectation of privacy. The ICO provides a DPIA template on their website to help you complete this step. For a full breakdown of CCTV laws and what you can and cannot do, see our detailed guide.

Appoint and Register a Data Protection Officer

Registration with the ICO is a legal requirement in the UK. The data protection fee must be paid annually, and failure to register can result in a penalty. As of 2026, the fee for most organisations is either £40 or £60 per year, depending on the size of the business.

Create a CCTV Usage Policy

Your CCTV usage policy should document who operates the system, how footage is accessed, how long it is stored, and when it is deleted. This policy should be available to any individual who requests it and forms part of your broader data protection documentation.

Managing Personal Data Requests

Under the UK GDPR, individuals have the right to request access to CCTV footage that contains their personal data. This is known as a Subject Access Request (SAR).

You must respond to a SAR within one calendar month. It is good practice to have a clear, documented process so that any member of your team can handle a request correctly and within the legal timeframe.

“The most common issue we see with CCTV installations is a lack of planning before cameras go up. A proper site survey and compliance review at the start can save weeks of rework and potential ICO scrutiny. Getting the checklist right from day one protects both the organisation and the people on site.”

Expert Insight: Daniel Meeajane, Business Development Director at Clearway

CCTV Staff Training

Staff training should cover how to operate the CCTV system, how to handle Subject Access Requests, and how to respond if footage needs to be shared with law enforcement. Training records should be kept as evidence of compliance.

Information Retention Policies

Most UK businesses retain CCTV footage for 30 days, though this varies depending on the sector and the purpose of the recording. The ICO advises that footage should not be kept for longer than necessary. Your retention policy should specify the exact period and include an automated or scheduled process for deleting expired footage.

Need help with your CCTV installation?

Clearway provides commercial CCTV installation, remote CCTV monitoring, and ongoing CCTV maintenance for businesses across the UK. Get in touch to discuss your requirements.

Daniel Meeajane

Business Development Director, Clearway

Daniel Meeajane

A comprehensive CCTV installation checklist ensures your system complies with UK data protection law while delivering effective surveillance. This includes everything from ICO registration to proper camera placement and staff training to maintain both security and legal compliance.

Choosing the Right CCTV Hardware

Selecting the right cameras and recording equipment is a critical step in any CCTV installation. The hardware you choose should match the specific risks identified during your site survey and security risk assessment.

Consider the following when selecting your CCTV equipment:

• Resolution: 1080p (Full HD) is the minimum standard for most commercial installations. For areas where identification is critical, such as entry points or till areas, 4K cameras provide clearer footage.
• Environment: Outdoor cameras should have an appropriate IP rating for weather resistance. Vandal-prone locations may require IK-rated dome cameras.
• Lighting: Sites with low light or no light conditions will benefit from cameras with infrared LEDs or thermal imaging. Read more about how CCTV works in the dark.
• Camera type: There are several types of CCTV camera available, including bullet, dome, PTZ, and thermal. Each serves a different purpose.
• Analytics: Modern AI CCTV systems can detect specific events such as intrusion, loitering, or vehicle recognition, reducing the need for constant manual monitoring.
• Storage: Calculate your storage requirements based on the number of cameras, resolution, frame rate, and retention period.

For permanent installations, fixed CCTV systems offer the most reliable performance. For temporary sites such as construction projects, temporary CCTV hire or construction site CCTV provides flexible coverage without long-term commitment.

Data Quality Inspection

Image quality should be tested during both day and night conditions. The British Standard BS EN 50132-7 recommends a minimum of 50 pixels per face for identification-quality images. If your footage does not meet this standard, you may need to adjust camera positioning, upgrade lenses, or improve site lighting.

Information Security Protocols

Stored CCTV footage must be protected against unauthorised access. Use strong, unique passwords on all devices, disable unused network services, and consider segregating your CCTV network from your main business network using VLANs. The National Cyber Security Centre (NCSC) publishes guidance on securing connected devices that applies directly to CCTV systems.

Put Up Appropriate CCTV Signage

CCTV signage must include the name of the organisation operating the system, the purpose of the surveillance, and contact details for further information. Signs should be clearly visible before a person enters the area covered by cameras. For a full overview of CCTV rules and signage requirements, see our guide.

Post-Installation Testing and Maintenance

Once your CCTV system is installed, commissioning and ongoing maintenance are essential to ensure it continues to perform as intended.

Commissioning tasks:

• Walk-test every camera field of view to check focus, exposure, and coverage.
• Verify that motion detection zones are correctly configured.
• Confirm that recording is functioning and footage is being stored correctly.
• Test remote access to ensure authorised users can view live and recorded footage.
• Document all camera positions, IP addresses, and system credentials in a secure configuration file.

Ongoing maintenance:

Regular CCTV maintenance keeps your system reliable and compliant. This should include:

• Quarterly camera inspections covering lenses, housings, and cable connections.
• Monthly firmware and software updates to address security vulnerabilities.
• Annual review of your DPIA and CCTV usage policy.
• Scheduled checks to confirm signage is still visible and accurate.

A system that is not maintained is a liability. Regular checks ensure that footage is available when needed and that your organisation remains compliant with data protection law.

You’re ready to install your CCTV

Once you have worked through this checklist, you are in an excellent position to continue with your CCTV security surveillance, safe in the knowledge that you have implemented all the necessary controls, communications and policies to ensure it is being used appropriately.

Note that registration with the Information Commissioner’s Office in the UK is compulsory and carries an annual fee. It is, therefore, vital to ensure you complete the registration as soon as the CCTV installation takes place.

Whether you need a full commercial CCTV installation, remote monitoring, or a CCTV maintenance plan, Clearway can help you build a compliant and effective surveillance system. Contact us to discuss your requirements.

FAQs

What are the rules for installing CCTV in the UK?

CCTV installation in the UK is governed by the UK GDPR and the Data Protection Act 2018. In simpler terms, you must register with the ICO, conduct a Data Protection Impact Assessment, display clear signage, appoint a responsible person, and have a documented usage and retention policy. For a detailed breakdown, read our guide on CCTV laws explained.

What is the British standard for CCTV installation?

The relevant British Standard for CCTV installation is BS EN 50132-7, which covers the application guidelines for video surveillance systems. In simpler terms, this standard sets out recommendations for camera placement, image quality (including the 50 pixels-per-face rule for identification), and system design to ensure footage is fit for purpose.

What has to be in place if CCTV is installed?

If CCTV is installed, you must have ICO registration, a Data Protection Impact Assessment, a named Data Protection Officer, a CCTV usage policy, a data retention policy, staff training records, appropriate signage, and a process for handling Subject Access Requests. In simpler terms, you need documented proof that you have considered privacy, told people about the cameras, and set rules for how footage is used and stored.

What are the steps to install a CCTV camera?

The steps to install a CCTV camera include conducting a site survey, carrying out a security risk assessment, selecting the right hardware, planning camera placement and network infrastructure, mounting and commissioning the cameras, and then completing all compliance documentation. In simpler terms, you plan, install, test, and document, in that order.

How much does it cost to install a CCTV camera?

The cost of CCTV installation varies depending on the number of cameras, resolution, whether the system is wired or wireless, and the complexity of the site. In simpler terms, a small commercial system with a few cameras may cost a few thousand pounds, while a large multi-site installation with remote monitoring and AI analytics will be significantly more. Contact Clearway for a tailored quote.

Can I install CCTV on my own?

You can install CCTV yourself for domestic use, but commercial installations should be carried out by a qualified professional to ensure compliance with UK data protection law and British Standards. In simpler terms, DIY installation may work for a home camera, but businesses should use a professional installer to avoid legal and technical issues. Learn more about how CCTV cameras work.

Written by Daniel Meeajane

Business Development Director, Clearway Fire and Security

View Daniel’s LinkedIn profile More articles by Daniel

Daniel Meeajane is Business Development Director at Clearway Fire and Security, bringing strong commercial expertise alongside a detailed understanding of fire protection systems and industry standards.

Having contributed to a number of major projects and delivered successful outcomes, Daniel uses his knowledge and experience to drive awareness of effective fire protection solutions across a wide range of environments. His approach combines relationship-led business development with a clear understanding of technical compliance, operational requirements, and customer risk.

Daniel has a strong understanding of BS 5839-1, recognising the importance of compliant fire detection and alarm system design, installation, commissioning, and maintenance. He also keeps pace with the latest developments in fire technology, ensuring clients benefit from informed guidance, up-to-date solutions, and best practice across every stage of delivery.