When customers ask for facial recognition after the West End rollout: what installers should explain first

When customers ask for facial recognition after the West End rollout: what installers should explain first

When customers ask for facial recognition after the West End rollout: what installers should explain first

The facial recognition cameras your customer saw on the news are police live facial recognition, run under a law enforcement framework that a private business does not have. So when a shop owner asks you to fit “facial recognition like the West End”, the honest first answer is that they cannot simply copy it.

What a private site can deploy sits under UK GDPR and the Data Protection Act 2018, and the bar is high. Getting that clear at quotation stage stops the customer buying a feature they may not be able to lawfully switch on.

The context helps. In June 2026, the Metropolitan Police confirmed plans to introduce static live facial recognition cameras across the West End and Soho by the end of the year. The decision followed a 6-month Croydon pilot between October 2025 and March 2026, where 24 operations led to 173 arrests. More than 470,000 people walked past the cameras during the pilot, with 1 false alert and no arrest from a false alert.

Your customer sees the numbers and assumes the technology is now fair game for anyone. It is not.

Why the West End system is not something you can simply sell

Police LFR deployments use watchlists, operational safeguards, officers on the ground and policing purposes. The Met says each deployment uses a bespoke, intelligence-led watchlist created no more than 24 hours in advance and deleted immediately afterwards.

A retailer or landlord has a different legal position. For a private organisation, using cameras to identify people by their face usually means processing biometric data. Where that data is used to uniquely identify someone, it is special category data. The ICO’s facial recognition guidance says that processing is prohibited unless the organisation has a lawful basis under Article 6 UK GDPR and a separate Article 9 condition.

In practice, a Data Protection Impact Assessment is likely to be needed before go-live. The customer also needs to show why facial recognition is necessary, why less intrusive options are not enough, how watchlists are controlled, how errors are handled, and how people are told what is happening. This is where our note on AI and smart analytics is worth sharing.

What a private customer can actually do

Most customers who ask for facial recognition do not really need it. They want fewer break-ins, better evidence, or a way to flag known offenders. Those aims can often be met with less intrusive kit.

Approach

Who it suits

The catch

Police live facial recognition

Police deployments under a policing framework

Not a private business model

Commercial facial recognition

Sites with a strong, documented need

Needs Article 6, Article 9, a DPIA, signage and strict controls

Analytics without identification

People-counting, intrusion alerts or line-crossing

Lower risk because no one is uniquely identified

Number plate recognition

Car parks, yards and forecourts

Still personal data, but often easier to justify

Active deterrence

Shops, yards and small business premises

Prevents incidents without face matching

For a high street parade, our look at high street surveillance shows how councils can improve coverage without defaulting to face matching. Where a customer wants to catch vehicles, number plate recognition may be the more proportionate route, and it pairs well with the IP CCTV cameras most installers already stock.

Where the aim is deterrence, active deterrence cameras with light and audio may do more for a corner shop than any watchlist, as our piece on advanced IP systems for convenience stores explains.

If a customer still wants true face matching and can build the legal case, spec it properly. That means a network video recorder that supports the feature, CCTV storage drives sized for the load, and the right camera accessories and signage. Kit from a supplier that takes NDAA compliance seriously also matters once sensitive data is in play.

Frequently asked questions

Is facial recognition legal for private businesses in the UK?
It can be, but only where the organisation has a lawful basis, an Article 9 condition, a DPIA and a strong necessity and proportionality case.

Do shops in the UK use facial recognition?
Some do, mainly larger retailers targeting repeat offending, but the ICO expects strong documentation and safeguards.

Does facial recognition need consent?
Explicit consent is one possible Article 9 condition, but it is often difficult to rely on in a shop because people need a genuine choice.

Is the West End rollout the same as shop CCTV?
No. It is police live facial recognition under a policing framework. A private CCTV system cannot be run in the same way.

Help your customer buy the right thing

The safest sale is the one that matches what the customer is allowed to run. As a trade CCTV supplier, FVS CCTV can help you spec deterrence, number plate recognition or a compliant face-matching system, with free technical support when the hard questions come up. Open a trade account or call the team before you quote your next job.