The CCTV Audit for Data Protection offered by DQM GRC is a specialised service designed to help organisations ensure compliance with data protection regulations regarding the use of closed-circuit television (CCTV) systems.

The use of CCTV on commercial premises is subject to compliance with The Surveillance Camera Code of Practice 2013 and UK data protection law.

This service covers various aspects of CCTV usage, including system design, signage, data retention, access controls, and data protection impact assessments. DQM GRC's team of experts conducts thorough audits, identifies any non-compliant areas, and offers practical recommendations to address gaps and improve compliance.

Find out more below or contact us to speak to an expert within one working day, using the form below.

Your cookie settings may prevent you from seeing our website forms. If you prefer, you can email us at

What to expect

Using a combination of physical visits and remote auditing, we will assess your organisation’s CCTV use and measure it against the regulatory requirements. Typically, this would include:


DPIA review/template

We will review your completed data protection impact assessment (DPIA) or provide a template for completion with support if required. Monitoring activities require a DPIA to measure the impact of using surveillance and ensure the benefits outweigh the risks.


On-site CCTV audits

We will visit your site(s) to review the use of CCTV against the completed DPIA for each CCTV system and perform a gap analysis aligned to the surveillance camera Code of Practice.


Legal review

If your organisation does not have a DPO (data protection officer), once all DPIAs and gap analysis reports have been completed, we will liaise with our sister company GRCI Law to ensure all regulatory aspects have been covered.


Gap analysis and DPIAs

The gap analysis will provide a complete overview of your CCTV data protection compliance position. With this CCTV audit report you will receive clear, actionable steps to become compliant. We will also provide feedback on your DPIAs where appropriate and can offer consultancy support where needed to assist you in becoming compliant.


Ongoing maintenance of compliance

We will work with you to ensure you have a process to monitor CCTV data protection compliance moving forward.

We will tailor our service to suit you. Regardless of the size and type of operation, we can independently audit the use of CCTV to give an accurate picture of compliance.

  •  Just one camera.
  •  Multiple cameras across several sites.
  •  Monitored in-house.
  •  Monitored by a third party.

This audit can be carried out individually or as part of a broader data protection project. Let us know your requirements, and we will create a proposal that suits you.

Bespoke Solutions

Service benefits

  • Ensure that you comply with relevant data protection laws when using CCTV to monitor your premises.
  • Ensure that you comply appropriately with requests for CCTV imagery from individuals and authorities.
  • Get a tailored proposal that suits your needs.

Speak to us about CCTV audits today

Fill in a contact form, and someone will contact you within one working day to discuss your requirements.

Speak to an expert