Overview

IP cameras offer significantly higher resolution than analogue systems, support remote viewing via smartphone apps, include smart detection features (motion, person, vehicle), and scale easily by adding cameras to your network.

Step 1: Plan Your Camera System

Design effective camera coverage for your premises.

1

Camera Placement Strategy

Cover ALL entry and exit points: front door, back door, loading bays, fire exits
Monitor reception and public-facing areas where visitors and customers enter
Cover car park entrances and key parking areas
Install cameras in server rooms, stock rooms, and high-value storage areas
Position cameras to capture faces at head height (1.5-1.8m) for identification
Avoid cameras in toilets, changing areas, private break rooms, and union meeting rooms
Consider both interior and exterior lighting conditions, some areas need IR capability

2

Choose Camera Equipment

Indoor dome cameras: 2-4 MP, vandal-resistant, from 50 pounds each
Outdoor bullet cameras: 4-8 MP, weatherproof IP67, from 80 pounds each
PTZ (Pan-Tilt-Zoom) cameras: For large areas, from 200 pounds each
NVR (Network Video Recorder): Centralised recording and management
Calculate storage: 1 camera at 4MP continuous = approximately 25GB per day
Plan retention: 30 days minimum, which requires significant storage
PoE (Power over Ethernet) cameras: Single cable for power and data, simplifies installation

3

Recording and Storage

NVR sizing: Multiply per-camera daily storage x number of cameras x retention days
Example: 8 cameras x 25GB/day x 30 days = 6TB minimum NVR storage
Use surveillance-rated hard drives: WD Purple, Seagate SkyHawk
Configure motion-based recording to reduce storage requirements by 50-70%
Enable H.265 compression for 50% storage savings over H.264
Consider cloud backup of key footage for offsite protection

Step 2: Network and Camera Configuration

Set up cameras securely on your business network.

1

Secure Camera Network

Place ALL cameras on a dedicated VLAN, isolated from corporate network
Use a PoE switch dedicated to cameras for easy power management
Change every camera's default username and password immediately after setup
Disable UPnP on all cameras, prevents automatic port forwarding
Keep camera firmware updated, subscribe to manufacturer security advisories
Use HTTPS for camera web interface access
Disable any cloud services you don't need on the cameras

2

NVR Configuration

Connect NVR to the camera VLAN via a managed switch
Add cameras to NVR using their static IP addresses
Configure recording schedules: Continuous for entry points, motion-triggered for others
Set up motion detection zones to reduce false alerts
Configure email notifications for after-hours motion detection
Set up NVR user accounts with role-based access (admin, viewer, operator)
Enable NVR hard drive health monitoring

3

Remote Viewing

Install manufacturer's mobile app: Hik-Connect (Hikvision), Reolink, etc.
Set up VPN on your router for secure remote access to camera feeds
Avoid exposing NVR directly to the internet, use VPN or secure relay
Enable push notifications for motion alerts to your phone
Configure viewing permissions per user, not everyone needs all cameras
Test remote viewing from 4G/5G to ensure it works outside the office

Step 3: GDPR and Legal Compliance

Meet UK legal requirements for workplace surveillance.

1

Signage and Notification

Display clear, visible CCTV signage at ALL entrances to the monitored area
Signs must include: That recording is taking place, your company name, contact details
Signs should state the purpose of surveillance (e.g., crime prevention, safety)
Use the ICO template for CCTV signage as a starting point
Place signs at eye level where they cannot be missed
Update signs whenever the scope or purpose of surveillance changes

2

Legal Documentation

Register with the ICO if monitoring areas accessible to the public (fee: 40-60 pounds/year)
Create a CCTV policy document covering: Purpose, retention period, access controls, rights
Conduct a Data Protection Impact Assessment (DPIA) before installing cameras
Include CCTV in your employee privacy notice and handbook
Document the legal basis for surveillance (usually legitimate interests)
Review your CCTV policy annually and update as needed

3

Data Subject Rights

Respond to Subject Access Requests (SARs) within 30 calendar days
Individuals can request footage of themselves, you must provide it
Blur or redact other people in the footage before providing it
Delete footage after your stated retention period, do not keep indefinitely
Log all access to CCTV footage: who viewed what and when
Train staff who access CCTV on data protection obligations

Warning:

Failure to comply with GDPR requirements for CCTV can result in enforcement action and fines from the ICO. Have signage and documentation in place before cameras go live.