What the DWP’s updated CCTV policy tells installers about handover, training and audit trails

What the DWP’s updated CCTV policy tells installers about handover, training and audit trails

What the DWP’s updated CCTV policy tells installers about handover, training and audit trails

When the Department for Work and Pensions updated its CCTV Security Policy on 11 June 2026, the useful message for installers was not just about public sector surveillance. It was about how a large organisation now expects CCTV systems to be documented, controlled, reviewed and audited.

You may never install cameras in a Jobcentre. The expectations are still a good preview of what commercial clients, insurers, facilities managers and loss adjusters are starting to ask for. A clean install is no longer enough. Clients increasingly want evidence that the system can be operated properly after you leave site.

The DWP uses CCTV for the security of staff, visitors, contractors, information and equipment, and its policy refers to UK GDPR, the Data Protection Act 2018, the Surveillance Camera Code of Practice and ICO guidance. You can read related DWP data handling detail in its personal information charter. None of this creates new law for private installers, but it does show the direction of travel, and it lines up with the wider changes in CCTV specs and compliance working through the trade.

Handover is part of the job, not an afterthought

Picture a small retail unit in Leeds. You fit 8 cameras, the client signs off, and 4 months later they ask for footage of an incident at the back door. If nobody was shown how to export a clip, and there is no record of who can access the system, that is your phone ringing on a Saturday.

A wasted half day on site can easily cost more than £100 once you count fuel, time and the job you could have been doing elsewhere. Good handover prevents much of that, and it is one of the simplest ways of reducing return visits through better planning.

A handover pack does not need to be elaborate. It needs to be consistent on every job, which also makes your pricing look sharper when you are putting together tender ready proposals.

Handover item

Why it matters

As-built camera plan

Shows coverage, angles and possible blind spots

Admin and user logins

Stops shared passwords and undocumented access

Retention setting in writing

Shows footage is kept only as long as needed

Export instructions

Lets the client pull a clip without calling you out

Signage confirmation

Shows people have been told recording is taking place

Training the people who press the buttons

The DWP policy is clear that people who operate, manage, monitor or administer CCTV need training appropriate to their role. For installers, the same principle applies commercially. Someone has to know how to search footage, export it without losing time and date information, protect it from unnecessary access, and understand when redaction may be needed.

On a domestic job, that may be a 5-minute walkthrough. On a larger IP CCTV system, it is worth leaving a short written guide and a named support contact. This is where service and maintenance plans earn their keep, and where buyers quietly learn why technical support matters more than price.

Audit trails are a hardware choice as much as a habit

An audit trail helps answer a simple question: who viewed, exported, changed or deleted footage, and when? That depends on accurate time and date stamping, separate user accounts, sensible permissions and a recorder that logs activity rather than letting everyone use one anonymous password.

Specifying IP CCTV NVRs with proper user management at the design stage can save an awkward conversation later. The same applies to smaller items, from CCTV signage and accessories to labelled cabling and documented retention settings. It is worth knowing what to ask suppliers about logging and access control before you settle on a range, and it pays to work with a trade CCTV supplier that backs the kit with technical help rather than just shipping boxes.

FAQs

How long should you keep CCTV footage in the UK?

There is no single legal maximum. The ICO says retention should be based on the purpose of the system, kept as short as necessary and recorded in the CCTV policy. Many businesses use around 30 days, but the right period depends on the risk and purpose.

Is CCTV covered by GDPR?

Yes. If a camera records identifiable people, UK GDPR and the Data Protection Act 2018 can apply. The organisation deciding why and how the system is used is usually the data controller.

Do CCTV operators need training?

There is no general licence for a business using its own CCTV system. However, people handling footage should understand access, retention, privacy, exports and data requests. Public space surveillance work may have separate licensing requirements.

What should a CCTV handover include?

At minimum, include a camera plan, login details, the retention setting, export instructions and confirmation that signage is in place.

Spec systems that stand up to scrutiny

Build your next install around recorders and accessories that keep clean records by default. Browse the FVS CCTV range, or call the technical team for a second opinion before you quote.