Skip to content
What Is a Commercial CCTV System?
Let’s be honest – CCTV has come a long way from grainy footage playing on a monitor behind the security desk. Modern commercial video surveillance does far more than just record what happens. Today’s systems incorporate artificial intelligence, sophisticated analytics, and integration with everything from access control to building management. They are as much business intelligence tools as security measures.
For businesses, CCTV serves multiple purposes: deterring opportunistic crime, providing evidence when incidents occur, supporting health and safety compliance, and increasingly, delivering operational insights that inform business decisions. Retailers use it to understand customer flow. Warehouses use it to identify bottlenecks. Offices use it to manage meeting room utilisation.
But here’s the thing that trips people up: commercial CCTV isn’t like sticking a Ring doorbell on your house. There is serious regulatory compliance to consider. UK GDPR. The Data Protection Act 2018. The Surveillance Camera Code of Practice. If you are operating video surveillance on business premises, you need to understand these obligations before you install a single camera.
Types of CCTV Technology
Analogue CCTV Systems
Analogue was the standard for decades – cameras sending video signals over coaxial cable to a Digital Video Recorder. The technology still exists and still works, but it is increasingly considered legacy for new commercial installations.
That said, several analogue HD technologies emerged to extend the life of existing coaxial infrastructure: HD-TVI, HD-CVI, AHD. These deliver respectable 1080p or better resolution over the coax cables you already have in place. If you have got significant investment in coaxial infrastructure and the budget for a complete IP migration isn’t there, these technologies offer a sensible upgrade path.
The limitations are real though. Resolution caps out below what modern IP cameras achieve. Analytics capabilities are limited. You are tied to point-to-point cabling. Manufacturers are putting development resources into IP, not analogue. Integration flexibility is constrained. For new installations, analogue is hard to justify.
IP (Network) CCTV Systems
IP cameras transmit digital video over standard network infrastructure to a Network Video Recorder or Video Management System. This is now the default choice for new commercial installations, and for good reason.
The advantages stack up. Superior resolution – 4K is standard, 8K is available. Advanced on-board analytics (the camera itself can detect and classify objects). Flexible network-based architecture. Power over Ethernet simplifies installation by carrying power and data over the same cable. Easier integration with other systems. Remote access and cloud capabilities. It is also the technology getting manufacturer investment and development attention.
IP cameras come in various forms depending on what you need: fixed cameras for permanent coverage, PTZ (Pan-Tilt-Zoom) for active monitoring, multi-sensor cameras providing panoramic coverage from a single unit, fisheye cameras for 180° or 360° views with software dewarping, thermal cameras that detect heat signatures regardless of lighting conditions, and specialised variants for explosion-proof, marine, or covert applications.
Cloud-Managed Video Surveillance
Cloud-managed systems store video and configuration in the cloud rather than on-premises. It is a different operational model with distinct trade-offs.
The appeal is obvious: reduced on-premises infrastructure, automatic software updates, simplified multi-site management, built-in redundancy and disaster recovery, predictable subscription costs, access from anywhere with internet connectivity.
But think carefully about: bandwidth requirements for uploading video, ongoing subscription costs versus one-time capital purchase, data sovereignty (where is your footage actually stored?), dependence on internet connectivity for access, and long-term cost comparison with on-premises. For some organisations cloud makes perfect sense. For others, particularly those with existing network infrastructure or data residency requirements, on-premises remains preferable.
Many organisations now deploy hybrid architectures – on-premises recording for primary storage, cloud backup for critical footage, cloud-based management and remote access. You get the bandwidth efficiency and independence of local recording with the flexibility and resilience of cloud.
Video Analytics and AI Capabilities
This is where modern CCTV gets genuinely interesting. Video analytics transform cameras from passive recording devices into intelligent sensors that detect, classify, and alert on events automatically.
Detection and Classification
Motion Detection has been around forever, but modern implementations are genuinely sophisticated: adjustable sensitivity, scheduled activation, region-of-interest masking, pet and animal rejection to reduce false alarms.
Object Classification is where AI earns its keep. Cameras can now distinguish between people, vehicles, and animals. They can identify vehicle types. They can track object attributes like colour, size, and direction of travel. This dramatically reduces false alarms by alerting only on relevant activity – you get notified about the person approaching your perimeter, not the fox wandering through.
Line Crossing and Intrusion Detection creates virtual tripwires and zones. Detect perimeter breaches. Identify entry to restricted areas. Flag wrong-way movement. Alert on loitering beyond defined durations.
Behavioural Analytics
Crowd Detection algorithms monitor crowd formation and dispersal – useful for retail queue management, public space safety, event monitoring, or managing occupancy levels.
Slip and Fall Detection serves healthcare, retail, and industrial environments, enabling immediate incident response, providing evidence for investigations, and supporting pattern analysis for prevention.
Aggressive Behaviour Detection analyses body language and movement patterns to indicate potential confrontations, customer distress, or staff safety concerns. It’s not perfect, but it’s another data point for security teams monitoring multiple feeds.
People Counting and Occupancy
Accurate footfall counting supports decisions you might not initially associate with security: staffing optimisation, marketing campaign effectiveness measurement, space utilisation analysis, lease negotiations based on actual traffic.
Stereo cameras or AI-based counting provide accurate entrance/exit data, directional flow analysis, queue length monitoring, and occupancy limit enforcement.
Facial Recognition
This one needs careful handling. Facial recognition offers powerful capabilities – VIP and watchlist alerting, access control verification, time and attendance, customer recognition. But it carries significant legal and ethical weight in the UK.
Facial recognition processes biometric data, classified as special category personal data under UK GDPR. Deployment requires clear lawful basis (legitimate interests is rarely sufficient), Data Protection Impact Assessment, proportionality assessment, ICO guidance compliance, and transparent notification to data subjects.
Most businesses should approach facial recognition with considerable caution and take specialist legal advice before deployment. The technology works. The compliance burden is substantial.
Licence Plate Recognition (LPR/ANPR)
Automatic Number Plate Recognition provides vehicle identification and logging, barrier and gate automation, parking management, watchlist alerting, and journey time analysis.
Remember that vehicle registration numbers are linked to individuals – this is personal data processing requiring appropriate privacy notices and retention policies.
CCTV and the Law: GDPR Compliance Essentials
Operating CCTV in the UK means complying with data protection legislation. Non-compliance risks significant fines, reputational damage, and – something people don’t always consider – potentially invalidated evidence if you need footage for legal proceedings.
Legal Framework
UK GDPR and Data Protection Act 2018
CCTV footage containing identifiable individuals constitutes personal data. Full stop. You are a data controller with all the obligations that entails.
Surveillance Camera Code of Practice
Applies to surveillance camera systems operated by relevant authorities in England and Wales, though the principles represent best practice for all operators. The code emphasises proportionality, legitimate purpose, and accountability.
ICO Guidance
The Information Commissioner’s Office provides detailed guidance on CCTV for businesses. It’s worth reading before you specify a system.
Compliance Requirements in Practice
Lawful Basis
You need a lawful basis for processing. For most business CCTV, this will be legitimate interests, but you need to document your assessment. Why do you need surveillance? What’s the legitimate interest being served? Is it proportionate?
Privacy Impact Assessment
For any significant surveillance system, conduct a Data Protection Impact Assessment. Document risks and mitigation measures.
Signage
Display clear signage at entry points identifying the data controller, the purpose of surveillance, and contact details for enquiries. People need to know they are being recorded before they enter the surveilled area.
Retention Policies
Define and enforce appropriate retention periods. 30 days is common for general surveillance. Incident footage retained longer. Evidence for legal proceedings retained until the process concludes. Excessive retention breaches data minimisation principles.
Subject Access Requests
People can request footage of themselves. You need processes to respond within one month, provide footage in accessible format, and redact other individuals whose privacy would be compromised.
Data Security
Secure storage, encrypted transmission where appropriate, access controls, audit trails. The same principles you’d apply to any sensitive data.
System Design Considerations
Camera Placement and Coverage
Effective CCTV design starts with understanding what you actually need to achieve, then working backwards to equipment and positions. Too many systems get designed around available camera positions rather than coverage objectives.
Define Coverage Objectives for each camera
Detection: Confirm presence of activity (wide angle coverage acceptable) – Recognition: Identify known individuals (medium shot required) – Identification: Enable identification of unknown persons (close-up needed)
Pixels on Target
Industry standards define minimum pixel densities. Detection requires about 25 pixels per metre. Recognition needs 125 pixels per metre. Identification requires 250 pixels per metre. These aren’t arbitrary numbers – they are based on what’s actually achievable in evidence review.
Environmental Factors
Environmental Factors affect everything: lighting levels and how they vary throughout the day, backlight from windows and doors, weather exposure for external cameras, IR illumination requirements for night operation, reflection and glare. A camera position that looks perfect on paper might be useless in practice if there’s a west-facing window behind it.
Storage and Retention
Storage requirements depend on camera count, resolution, frame rate, compression, recording mode, and retention period. The numbers add up faster than people expect.
Calculating Storage
A single 4K camera recording continuously at 25 fps can generate hundreds of gigabytes per day, even with efficient H.265 compression. Motion-triggered recording reduces this significantly, but you need to model your specific scenario.
Storage Options
On-premises NVR with direct-attached storage typically handles up to 30 days for smaller installations. Larger deployments need enterprise server infrastructure or SAN storage. Cloud storage works for offsite backup or primary storage where bandwidth permits. Hybrid approaches combine local primary storage with cloud backup.
Redundancy
Critical applications need storage redundancy: RAID configuration for drive failure protection, dual recording for cameras covering critical areas, cloud backup for disaster recovery.
Remote Monitoring Options
Modern systems offer flexible remote access: secure web browser access, mobile apps for management review, integration with Alarm Receiving Centres for alarm verification.
Third-party monitoring services provide out-of-hours surveillance, alarm verification and response, proactive monitoring of high-risk areas. For organisations that can’t justify 24/7 on-site security presence, remote monitoring extends coverage affordably.
Integration with Access Control
Integrating video and access control delivers value greater than the sum of parts.
Event-Driven Recording
Camera recording triggered by access events. Automatic PTZ preset positioning when doors open. Pre and post-event recording for context.
Visual Verification
Door release with video confirmation. Remote access decision support. Intercom integration showing who’s at the door.
Forensic Correlation
Link access logs with video evidence. Timeline synchronisation across systems. Single search interface for investigations – find the access event, immediately see the associated video.
Installation and Ongoing Support
Professional Installation Process
A proper installation starts with comprehensive site survey: camera positions, mounting requirements, cable routes, network and power infrastructure, control room requirements, integration points.
System design documentation should include camera schedule with specifications, coverage plans demonstrating pixel density at key points, network architecture, storage calculations, integration specifications.
Professional installation ensures secure weather-appropriate mounting, neat compliant cabling, proper camera configuration and focusing, network security implementation, and comprehensive commissioning.
Handover should include system operation training, administration training, full documentation package, maintenance recommendations, and clear support contacts.
Maintenance Requirements
Systems need regular attention to stay reliable and compliant.
Planned Preventive Maintenance
Camera cleaning (external housings and lenses), mounting integrity checks, cable and connection inspection, software and firmware updates, recording verification, backup testing.
Recommended Schedule
Monthly visual inspection and recording checks. Quarterly comprehensive testing and software updates. Annual full system service and security review.
Remote Health Monitoring
Modern systems support proactive monitoring: camera status and image quality alerts, storage capacity warnings, network connectivity monitoring, automatic fault notification. Problems get identified before they become gaps in coverage.
Frequently Asked Questions
How long should CCTV footage be retained?
Keep retention proportionate to your processing purposes. Most businesses retain general surveillance footage for 30 days – enough to detect and investigate incidents. Incident footage stays longer. Evidence for legal proceedings gets retained until the process concludes. Keeping footage indefinitely “just in case” breaches data minimisation principles and increases your data protection risk.
Do I need to inform people about CCTV?
Yes. UK GDPR and the Surveillance Camera Code of Practice require transparency. Display clear signage at entry points identifying who’s responsible, why you are recording, and how to contact you with enquiries. Make additional information available on request or via your website privacy notice.
Can employees request CCTV footage of themselves?
They can. Under UK GDPR, employees have the right to access personal data held about them, including CCTV footage. Respond within one month, provide footage in accessible format, redact other individuals whose privacy would be compromised. Exemptions may apply for ongoing investigations or legal proceedings.
What resolution do I need?
It depends what you are trying to achieve. For general surveillance and detection, 1080p is typically sufficient. For identification – evidential footage of faces or number plates – you may need higher resolution or closer camera positioning. A professional site survey will recommend appropriate specifications based on your actual coverage objectives.
Can CCTV footage be used as evidence in court?
Yes, properly captured and preserved footage is routinely used in criminal and civil proceedings. To maximise evidential value: ensure accurate system time synchronisation, maintain secure access controls, document chain of custody when extracting footage, preserve original footage rather than re-encoded copies.
How does CCTV integrate with other security systems?
Modern CCTV integrates with access control (video verification, event-driven recording), intruder alarms (visual alarm verification, video pop-up), building management (occupancy-based control), and fire systems (evacuation camera presets). Integration typically happens through software platforms or hardware interfaces. Specify integration requirements early in system design rather than trying to retrofit later.
Next Steps
Designing an effective CCTV system means balancing coverage requirements, technology selection, compliance obligations, and budget. Get the balance right and you end up with a system that serves you well for years. Get it wrong and you are either over-specced and over-budget, or under-covered and exposed.
Evolution provides end-to-end video surveillance solutions from initial design through installation and ongoing maintenance. We start by understanding what you are actually trying to achieve and what compliance obligations apply, then design systems that deliver the coverage and capabilities you need.
To discuss your CCTV requirements, request a site survey and design consultation, review compliance obligations for your sector or explore integration with existing systems, please click the button below.