Commercial CCTV for a Small Business: Costs, the Rules and What Your Insurer Wants

A 4-camera 4K CCTV system for a small shop costs £1,200 to £2,000 installed at the time of writing; eight cameras run £2,500 to £4,000. Because the footage shows identifiable people, UK GDPR applies: signs, a retention limit (31 days is the norm) and usually the ICO's annual fee. Most insurers want recorded coverage of entrances, tills and stock.

What commercial CCTV costs

The prices below are for a professionally fitted wired 4K IP system with a recorder (NVR), surveillance-grade hard drive, cabling, setup and remote viewing on your phone, at the time of writing. Your survey moves them up or down.

Premises	Cameras	Typical installed cost
Small shop, salon or takeaway	4	£1,200 to £2,000
Cafe or small office	6	£1,800 to £3,200
Workshop or industrial unit	8	£2,500 to £4,000
Yard or car park	8 plus 2 ANPR	£3,300 to £5,800
Farm or holiday let with outbuildings	12	£3,700 to £6,400

What moves the price

Cable runs do most of it. A shop with the recorder in the back office and four cameras within 20 metres is a day's work; a farmyard with the furthest camera 150 metres away needs fibre or a wireless link between buildings. ANPR cameras cost more because they need a narrow view across one lane, strong infrared and careful positioning to read plates at night. Monitored systems, where a control room watches alerts and calls you or the police, add a monthly fee; most small businesses we work with watch their own cameras for nothing. For the home-sized version, see our CCTV installation cost guide.

The rules: UK GDPR and the ICO

Once a camera can pick out a face or a number plate, the footage is personal data and the business recording it is a data controller, answerable to the Information Commissioner's Office (ICO). None of it is hard, but it has to be done.

1. Pay the data protection fee. Most businesses using CCTV must register with the ICO and pay an annual fee, tiered by size. The smallest tier is a few tens of pounds a year and the fees rose in 2025; check the current figure and the exemption check on ico.org.uk.
2. Put up signs before people enter the covered area, saying CCTV is in operation, who operates it and how to contact them. A sticker on the door does for a shop; a yard needs one at the gate.
3. Keep footage only as long as you need it. 31 days is the common default and most recorders can be set to overwrite after that.
4. Never cover toilets, changing rooms or staff rest areas.
5. Tell staff in writing: where the cameras are, why, and how long footage is kept. Monitoring performance rather than security is a different purpose and needs its own justification.
6. Do not record audio unless you can justify it. The ICO treats audio as far more intrusive than video; most recorders can turn it off per camera.
7. Answer a subject access request within one month. Anyone caught on camera can ask for their footage, so you need to be able to find it, export it and blur other people out.
8. Secure the recorder: a locked room or cabinet, a strong unique password, no default logins, and clips exported only for a reason you have written down.

The ICO's plain-English guidance on CCTV and video surveillance is worth twenty minutes. If a camera will look over a pavement or a neighbour's yard, read our note on CCTV and planning permission too: planning is rarely the issue, but overlooking other people's property is.

What your insurer wants

Insurers rarely dictate a brand or a camera count. What they commonly ask for, in the policy wording or at renewal, is recorded CCTV covering the entrances, the till and the stock area, kept for at least 30 days, sometimes with an intruder alarm. Some policies offer a lower premium for it; others make it a condition of stock cover.

Two things trip people up. "Recorded" means a camera that only streams live to a phone does not count. And a cheap recorder that overwrites after nine days quietly breaks a 30-day requirement, and nobody finds out until a claim. Read the wording, or ask your broker to point to the clause, and have the hard drive sized to match. Keep the invoice and a plan of the camera positions with the policy.

What a good survey covers

We survey every business premises before quoting, free. A good survey walks the building the way a thief would and the way a customer would, and settles six things:

• Entrances and exits, including the fire door staff prop open for deliveries.
• Blind spots: behind the counter, the stockroom door, the corner the shoplifter already knows.
• Lighting at night: a camera facing a floodlight or a dark alley needs the right sensor.
• Where the recorder lives: locked and ventilated, not under the till.
• The network: remote viewing needs a reliable connection, so we check the router and whether the business WiFi can carry it alongside the card machine.
• Cable routes back to the recorder without wire trailing across the shop floor.

The quote should be in writing with the camera positions marked. An installer who quotes by phone from a camera count is guessing.

Why wired PoE beats WiFi cameras in a business

Power over Ethernet (PoE) cameras take power and data down one network cable from the recorder. They do not drop off when the shop WiFi gets busy, need no plug socket by each camera, and are far harder to jam than a wireless camera. In a business the WiFi is shared with card readers, the till and customers' phones, and the moment it stutters you have a gap in the recording (more in our wired vs wireless CCTV guide). For anything the insurer or the ICO might ask you to produce, wire it.

Keep it working: the yearly check

A recorder in a stockroom gets forgotten until the day it is needed. Once a year, confirm every camera is recording (not just showing live), check the hard drive health, clean the lenses, re-aim anything knocked by a delivery, update the firmware and change the password if staff have left. It is a half-hour visit for us. Between visits, open the app once a week and scroll back a few days.