How Data Protection Law Can Help Protect Businesses From Crime

2026-07-03 · Source: ico.org.uk · Field: Legal & Regulatory — Compliance & Risk Management, Regulatory Affairs & Government Relations · Depth: Novice, quick

Summary

The British Retail Consortium estimates nearly 5.5 million theft incidents and 43,000 violence incidents against staff occur annually across the retail sector. Addressing concerns that data protection law impedes crime prevention efforts, new guidance clarifies how businesses, particularly small retailers, can lawfully use personal information, including CCTV footage, to protect their operations, staff, and premises. This advice, developed with input from industry bodies like the Federation of Small Businesses, provides clear answers to practical questions such as sharing information with staff and complying with regulations. It also details the high bar for lawful use of facial recognition technology in public places, advising careful review before implementation. The guidance includes checklists, practical examples, and template documents to simplify compliance for time-pressed business owners.

Key takeaway

For small retail business owners grappling with persistent crime, new guidance clarifies how to lawfully use existing data, such as CCTV footage, to protect your staff and premises. This resource provides a structured, compliant framework for information sharing, simplifying complex legal requirements. You should carefully review the advice, especially regarding the high bar for facial recognition technology, to ensure your crime prevention measures are both effective and legally sound.

Key insights

Data protection law empowers businesses to use personal information, including CCTV, for crime prevention.

Principles

• Data protection enables business protection.
• High bar for lawful facial recognition.
• Compliance requires structured information sharing.

Method

New guidance provides steps to lawfully share information, including checklists, practical examples, and template documents for compliance.

In practice

• Share crime-related information lawfully with staff.
• Carefully review guidance before using facial recognition.
• Utilize provided templates for compliance.

Topics

• Data Protection Law
• Retail Crime Prevention
• CCTV Systems
• Facial Recognition Technology
• Information Sharing
• Small Business Compliance

Best for: Entrepreneur, Operations Professional, Legal Professional

Related on AIssential

• Open Records Laws Reveal ALPRs’ Sprawling Surveillance. Now States Want to Block What the Public Sees. — States are blocking public access to ALPR data, but a balanced approach can harmonize transparency and privacy through redaction and aggregation.
• Video surveillance startup Vizza raises €30m Series B — AI-powered video surveillance is gaining traction for urban safety despite privacy concerns and evolving regulations.
• Smart Glasses and GDPR: Why Europe Is Cracking Down on Camera-Equipped Eyewear — Smart glasses pose significant GDPR compliance risks due to invisible recording and lack of bystander consent, prompting EU regulatory action.
• Alarm over launch of facial recognition in UK shops that instantly alerts police — UK retail facial recognition system Facewatch will instantly alert police to "serious offenders," raising significant civil liberties and regulatory concerns.
• Privacy, AI, and Tech Works Worth Your Attention — The current legal and regulatory landscape struggles to address systemic privacy and data exploitation challenges posed by AI and the data economy.
• The child exploitation crisis online: Gaps in digital privacy protection — Fragmented privacy laws and data collection practices create significant vulnerabilities, especially for children, in digital spaces.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by ico.org.uk.