Generate a CCTV Policy — Free Policy Document for UK Businesses

How the CCTV Policy Generator Works

Enter your business details and camera setup, and this tool generates a CCTV policy document covering all the sections required by ICO guidance: purpose and scope, lawful basis, data controller details, signage, retention and deletion, access controls, data subject rights, complaints handling, and review schedule.

What Your Policy Should Cover

A compliant CCTV policy explains why your business uses cameras, what lawful basis you rely on (usually legitimate interests), how footage is stored and secured, who can access it, how long it's kept, and how individuals can exercise their data rights — including making a subject access request for footage of themselves.

The Data Protection Act 2018 and the Surveillance Camera Code of Practice both require documentation of your CCTV use. Your policy is a key part of demonstrating compliance.

This generator produces a starting template. Review it carefully and adapt it to your specific circumstances — particularly if you have multiple sites, covert cameras, or audio recording enabled. This is not legal advice.