FCA authorised · FRN 724952 0117 325 0027Quote & buy →
Contractors who design
CCTV installers need professional indemnity insurance if they design systems, choose and position cameras, set up recording and remote access, or advise clients on data protection. Each of those is a professional judgement a client can sue over. If you only fit equipment to someone else’s design, the risk is smaller but rarely nil. Public liability usually won’t pay when a system simply fails to do its job, such as footage that cannot identify an intruder.
Part of: Professional indemnity for design and build contractors
In short
A CCTV installer takes on professional risk whenever they decide what a system must achieve: camera choice and siting, resolution, recording, retention and remote viewing. A system that records the wrong thing has failed to perform, which public liability policies usually exclude. Data protection adds a second exposure. The ICO says home CCTV capturing a neighbour’s property, a public area or communal space brings data protection law into play, and it expects a DPIA in most cases where organisations use surveillance. If you host or monitor footage for clients, you are likely to be their processor. PI responds to negligent design, set-up and advice, subject to the policy terms.
Last reviewed 5 October 2026 by the Apex professional indemnity team.
Professional indemnity (PI) insurance answers one question: did your skill and judgement let a client down and cost them money? For a CCTV installer, that judgement lives in the site survey, the camera schedule, the recorder settings and the advice you give at handover. Public liability (PL) deals with a different problem: a ladder that falls on a visitor or a drill bit through a water pipe.
Most CCTV disputes fall between the two. A camera fitted neatly and safely that cannot show a face at the shop door has not caused accidental damage. It has failed to deliver what the client paid for. PL wordings usually exclude that failure to perform, along with financial loss that isn’t linked to injury or damage. PI is written for exactly that allegation.
How much of your work is professional depends on how you sell it:
Treat these as illustrative: they are not real claims, but they are typical of what gets alleged against CCTV installers.
Nothing was broken in any of these. Each is a financial loss claim built on an allegation that you fell short of the care a competent CCTV designer or adviser would have taken.
When a CCTV dispute reaches the experts, the question is what a competent installer would have done. These are the yardsticks.
| Rule or standard | What it says | Why it matters to you |
|---|---|---|
| ICO video surveillance guidance (UK GDPR and Data Protection Act 2018) | Covers organisations using CCTV, ANPR, body-worn video, drones, facial recognition and smart doorbells. A data protection impact assessment (DPIA) is expected in most cases. | Your advice on siting, audio, signs and retention is judged against what the ICO expects of your client. |
| ICO guidance on home CCTV | If a home system captures someone else’s property, a public area or a communal space, data protection law applies to the homeowner. | Domestic installs carry data protection risk too, and homeowners rely on what you tell them. |
| Surveillance Camera Code of Practice and Protection of Freedoms Act 2012, s.33 | Local authorities and the police must have regard to the code. Other operators are encouraged to adopt it voluntarily. Principle 11 expects systems to produce images of evidential value. | On council and public-space systems, your design will be measured against it. |
| BS EN 62676-4 | Guidelines on selecting, planning, installing, commissioning, maintaining and testing systems, recommended to installers by the Biometrics and Surveillance Camera Commissioner. | The usual test of whether a design and its commissioning were competent. |
| BS 8418:2021 | Code of practice for detector-activated, remotely monitored systems. To be eligible for police response a system needs a unique reference number (URN), must comply with BS 8418, and must be installed and maintained by a company approved by a UKAS-accredited certification body. | Certifying compliance you haven’t achieved can cost a client its police response or its insurance terms. |
| UK GDPR, controllers and processors | A processor acts on a controller’s instructions under a binding contract, and can face ICO enforcement and compensation claims from individuals. | Cloud recording, hosted video management and remote monitoring are likely to make you your client’s processor. |
| Product Security and Telecommunications Infrastructure regime | Since 29 April 2024, consumer connectable products must not have universal default or easily guessable passwords. The duties fall on manufacturers, importers and distributors. | It shows the standard now expected for credentials. Leaving default logins in place is hard to defend. |
Underwriters will also ask whether you hold third-party certification from a UKAS-accredited body, and for which types of system. It doesn’t replace PI, but it is evidence that your work follows recognised standards.
The installer is rarely the data controller; the business or homeowner using the system is. But clients seldom read ICO guidance before they call you. They ask where cameras should go, whether they can record sound, what sign to put up and how long to keep footage. Your answers become their compliance decisions, and wrong answers cost them first and you second.
The ICO’s guidance gives you clear lines to work to:
Two habits reduce your exposure. First, record the client’s purpose and your decisions in a short operational requirement or handover note, saying what you have and haven’t advised on. Second, don’t drift into acting as the client’s data protection adviser unless your PI policy describes that service. Drafting DPIAs or retention policies is a different activity from installing cameras, and insurers treat it differently.
Remote services change your role. If footage sits on your cloud platform or your team monitors it, you are likely to be the client’s processor, with a contract to put in place and obligations of your own. A breach of your own platform is mainly a cyber insurance question; a claim that your configuration let a client down is a PI question. See cyber insurance explained.
| Usually covered by PI | Often excluded or limited | Needs a different policy |
|---|---|---|
| Negligent system design, camera selection and siting | Fines and penalties imposed on you by a regulator | Accidental damage to a client’s building during installation (public liability) |
| Wrong advice on camera positions, audio, signage or retention | Data protection consultancy that isn’t in your declared business description | Injury to your own staff (employers’ liability) |
| Configuration and commissioning errors, including retention and remote access settings | Promises that a system will be fit for purpose or achieve a set result | A breach of your own network or cloud platform (cyber insurance) |
| Certifying compliance with BS 8418 or a client’s specification when it was not met | Claims arising from work carried out before your retroactive date | Injury or damage caused by faulty equipment you supply (products liability) |
| Defence costs and expert fees | Circumstances you knew about before the policy started | Theft of tools, stock and equipment in transit |
Read the policy’s description of your professional business. A wording that calls you an electrical contractor or security installer without mentioning design, consultancy or remote services may not respond to the claims above, and every policy is subject to the insurer’s acceptance and its own terms.
No law sets a PI limit for CCTV installers. The figure comes from your clients: facilities managers, retailers, housing providers, schools and councils put a minimum in contracts or framework terms, and main contractors do the same in subcontracts. Before you sign, check:
PI is claims-made. It responds to claims first made while a policy is in force, not to the year the work was done. CCTV systems stay on the wall for years and their shortcomings surface only when something goes wrong, so a complaint about an install from five years ago falls on the policy you hold today. If you sell the business, retire or stop installing, run-off cover keeps that protection going: run-off cover explained.
A complete proposal gets better terms than a bare one, and a broker can only present what you tell us. Have these ready:
Speak to a broker
PI for CCTV installers, placed by a named broker
Start the online proposal and save it as you go, or leave your number and a named broker will call you back, usually the same working day.
Apex Insurance Brokers is an independent insurance broker based in Bristol, established in 2009 and authorised and regulated by the Financial Conduct Authority. We are not tied to one insurer: we work with over 30 markets, including Lloyd’s syndicates through wholesale brokers, and every client has a named broker who handles the placement, mid-term changes, certificates for clients and the renewal.
Yes, if you design systems, choose and position cameras, set up recording or remote access, or advise on data protection. Public liability covers accidental injury and property damage but usually excludes claims that a system failed to perform. PI responds to allegations of negligent design, configuration or advice, subject to the policy terms.
No law requires CCTV installers to hold PI. In practice, commercial clients, facilities managers, councils and main contractors usually require it in contracts or framework terms, often with a minimum limit. If you hold third-party certification, check that scheme’s own insurance requirements too.
The client, as controller, is normally responsible for compliance. But if they relied on your advice about camera positions, audio, signs or retention and that advice was wrong, they may claim their costs from you. PI can respond, subject to the policy terms. Advice given in writing, with its limits stated, is easier to defend.
It can, where the failure comes from your design, specification or set-up, such as a camera that could never identify faces at the distance required or a recorder set to overwrite too soon. Equipment that simply breaks down is usually a warranty matter, and accidental damage is for public liability.
It is worth having. The ICO says home CCTV that captures a neighbour’s property, a public area or a communal space brings data protection law into play, and homeowners often rely on the installer’s view of where cameras can point.
PI may respond if a client alleges your configuration was negligent, for example default credentials left in place or remote access opened without protection, subject to the policy terms. A breach of your own systems or cloud platform is usually a cyber insurance matter, so if you offer hosted recording, consider both.
Apex arranges professional indemnity insurance for CCTV installers across the UK. Tell us about your work and we’ll find cover that fits. Or call 0117 325 0027.
Start your PI proposal Call 0117 325 0027Apex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information, not advice on your individual circumstances. Cover is always subject to the insurer’s acceptance and the policy terms, and this page does not guarantee that cover will be available or on what terms.
