Category: Uncategorized

Landlords who let a house in multiple occupation (HMO) in England and Wales carry fire safety obligations that go well beyond a standard tenancy, and they sit alongside — not instead of — the security measures most landlords think about first, like locks and alarms. Getting the balance wrong is one of the more common ways HMO landlords fall foul of licensing rules, because a security fix (like adding extra locks to internal doors) can accidentally break a fire safety requirement (like a door needing to close and release freely).

What counts as a licensable HMO

Under gov.uk guidance, a large HMO — the category that requires mandatory licensing from the local council — is a property where at least five tenants live, forming more than one household, and where those tenants share toilet, bathroom or kitchen facilities. Smaller HMOs can also require a licence depending on the local council’s own additional or selective licensing schemes, so the five-tenant threshold is the mandatory national floor, not the only trigger. Letting a licensable HMO without a licence is a criminal offence, and the property must meet council-set standards, including fire safety conditions, before a licence will be granted at all.

The two laws doing the work

HMO fire safety in England rests on two separate pieces of legislation that apply together. The Regulatory Reform (Fire Safety) Order 2005 requires the “responsible person” — normally the landlord, or a managing agent with full control of the property — to carry out and keep under review a fire risk assessment covering the whole building, including escape routes and common areas. Separately, the Housing Act 2004 sets specific physical standards for HMOs, including fire detection, emergency lighting, fire doors and escape routes, and gives councils the power to attach these as mandatory conditions of the HMO licence itself — most directly, a licence condition requiring smoke alarms to be installed and kept in proper working order throughout the tenancy.

What the physical standards actually require

On fire doors, the widely applied minimum in HMOs is an FD30-rated door — one certified to resist fire for 30 minutes — fitted to bedrooms, kitchens, living areas and any door opening onto an escape route or stairwell. A compliant fire door is not just a thicker slab of wood: it needs intumescent strips around the frame that expand and seal the gap when heated, a smoke seal, and a working self-closing device, with the gap around the closed door kept to a few millimetres. A heavy-duty lock or a bolt that stops the door closing and latching automatically — exactly the kind of change a security-minded landlord might make — can take a compliant fire door out of compliance.

Fire detection requirements scale with the size and layout of the property. Smaller, lower-risk HMOs are commonly fitted with a Grade D system: mains-powered smoke and heat alarms with battery backup, interlinked so that one alarm triggers all of them. Larger or higher-risk HMOs — more storeys, more occupants, more complex escape routes — typically need a Grade A system instead, which adds a central control panel, break-glass call points and detectors wired into a monitored panel rather than a simple interlinked set of domestic units. Both grades are generally expected to give what’s called LD2 category coverage: detection in escape routes plus higher-risk rooms such as kitchens, not just bedrooms.

Where security measures can conflict with fire rules

The most common practical conflict is internal door security. Adding a keyed lock to a bedroom door in a shared house is a reasonable step for tenant privacy and security, but if it prevents the door being opened quickly from inside during an emergency, or stops a fire door self-closing properly, it can put the licence at risk. The same tension applies to security grilles or gates fitted over escape windows or final exit doors — a sensible-looking burglary deterrent can simultaneously remove a legally required means of escape. Landlords upgrading security in an HMO should treat any change to a door, window or escape route as a fire safety question first, ideally checked against the property’s fire risk assessment, before treating it as a security upgrade.

The bottom line

HMO fire safety obligations come from the Regulatory Reform (Fire Safety) Order 2005 and the Housing Act 2004 together, and they apply regardless of licensing status, with licensing conditions adding council-specific enforcement on top. FD30 doors, graded detection systems and unobstructed escape routes are not optional extras — and any security improvement to an HMO needs to be checked against them before it’s fitted, because a well-intentioned lock or grille is one of the easiest ways to turn a compliant property into a non-compliant one.

Sources

• GOV.UK, “Private renting: Houses in multiple occupation” — gov.uk/private-renting/houses-in-multiple-occupation
• Safety Clarity, “HMO Fire Safety Requirements: UK Landlord Guide” — safetyclarity.co.uk
• Tower Hamlets Council, “Fire safety in HMOs” — towerhamlets.gov.uk

A common assumption is that if a burglar alarm goes off, the police will come. In the UK, that is not how the system actually works for the great majority of domestic alarms — and understanding why is useful both for anyone choosing an alarm system and for anyone who has ever wondered why nobody showed up when their alarm sounded.

Police only attend alarms that meet a specific national policy

UK police forces respond to intruder alarms according to the National Police Chiefs’ Council’s (NPCC) Security Systems Policy, and official police guidance is explicit that “the police will only attend alarms installed in line with the National Police Chiefs’ Council’s (NPCC) Security Systems Policy.” The same guidance notes that most residential alarms fall outside this framework “by virtue of the fact they are audible-only systems” — meaning a bells-only alarm that simply makes a loud noise when triggered, with no monitoring behind it, is not something police have committed to responding to at all.

To qualify for a police response, a system generally needs to be professionally installed, connected to a monitoring centre, and registered with the local police force so that it has a Unique Reference Number (URN). Without a URN, an alarm signal reaching a monitoring centre has no pre-arranged route to a police response, however loudly it sounds at the property itself.

Why “verified” matters more than “loud”

Even where a URN exists, the level of priority given to a call depends on whether the alarm signal is verified. A verified alarm is one where a monitoring centre — or in some systems, sensors capable of confirming an intrusion, such as sequential detector activations or audio/visual confirmation — has established there is a real likelihood of a genuine break-in, rather than a false trigger from a pet, a loose window or a fault. Unverified signals, and audible-only systems with no monitoring at all, sit much further down the priority list, and in practice that can mean no dedicated police attendance unless there is separate evidence of a crime.

Official police guidance confirms this fallback: officers may still respond to a domestic alarm “when there is some evidence of criminal activity” — for example, a neighbour reporting signs of forced entry — and anyone who actually sees or hears indications of a break-in in progress is advised to dial 999 directly rather than rely on the alarm itself triggering a response.

What happens with persistent false alarms

Because attending false alarms uses up police resources that could otherwise go to genuine incidents, forces reserve the right to withdraw the police response commitment from a specific address or system if it generates repeated false activations. In practice, this is managed through the monitoring company and the URN registration rather than through a formal one-off warning, and a property that racks up enough unfounded call-outs can lose its qualifying status even if the alarm itself is technically compliant. Official guidance for persistent false alarms from audible-only systems — where no police response was ever available in the first place — points people toward their local council’s noise nuisance process instead, since that is a different, non-emergency channel.

What this means when choosing a system

For anyone buying an alarm specifically because they want a real chance of police attendance, the practical requirements are: professional installation by an NSI- or SSAIB-approved company, connection to a 24-hour monitoring centre, and formal registration for a URN with the local force. A DIY audible-only alarm bought online and self-installed can still be a genuinely useful deterrent — noise alone discourages many opportunist burglars — but it should not be relied on as a route to a guaranteed police visit, because under current national policy it generally isn’t one.

The bottom line

UK police response to alarms is governed by the NPCC Security Systems Policy, and it is built around verification and registration, not volume. An unmonitored, unregistered alarm may deter a burglar by making noise, but it does not, on its own, bring police to the door — that requires professional monitoring, a URN, and a signal a control room can treat as genuine.

Sources

• Ask the Police (National Police Chiefs’ Council-aligned FAQ), “A house/business burglar alarm is going off, what can I do?” — askthe.police.uk
• West Yorkshire Police, “A house / business burglar alarm is going off, what can I do?” — westyorkshire.police.uk

Anyone letting out a spare property, a granny annexe or a full-time holiday let through Airbnb needs to know that the platform’s own security camera rules are stricter than what UK or US privacy law alone would require. Getting them wrong risks a suspended listing, not just an unhappy guest — and the rules changed substantially in 2024, so advice written before then is likely out of date.

Indoor cameras are banned outright

Since 30 April 2024, Airbnb has banned security cameras and recording devices inside every listing worldwide, with no exceptions. The policy is explicit that this covers bedrooms, bathrooms, hallways and living areas, and that it does not matter whether the device is switched off or disclosed in the listing — a disconnected camera sitting on a shelf is still treated as a violation, because a guest has no way to confirm it is actually inactive. If a device is capable of recording or transmitting from inside the property at all, Airbnb’s position is that it needs to be physically removed, not just disabled or hidden.

This closed a gap that had previously allowed disclosed indoor cameras in common areas such as living rooms, provided guests were told about them before booking. That disclosure route no longer exists for anything inside the property.

What’s still allowed outside

Outdoor cameras remain permitted, but with two conditions. First, hosts must disclose the presence and general location of any outdoor camera in the listing before a guest books — a note such as “camera covering the front door” or “camera in the driveway” is the kind of disclosure Airbnb expects. Second, an outdoor camera cannot be angled or positioned to monitor indoor spaces through windows or doors, and it is not allowed to cover certain outdoor areas where guests have a heightened expectation of privacy, such as an enclosed outdoor shower or sauna.

Doorbell cameras are treated as a normal outdoor camera for these purposes and remain permitted with the same disclosure requirement. Noise decibel monitors — devices that measure sound levels in common areas to flag parties, without recording or transmitting actual audio or conversations — are also allowed, and their presence must be disclosed, though hosts are not required to state their exact location. Smart home devices that are not primarily surveillance tools, such as smart speakers or thermostats, are permitted and disclosure is encouraged but not mandatory.

What happens if a host gets it wrong

Airbnb’s enforcement route for this is guest reporting rather than routine inspection: a guest who discovers an undisclosed camera, or any camera inside the property, has explicit grounds to report the listing. Airbnb’s stated consequences range up to listing suspension or removal from the platform, and a pattern of complaints about a host’s use of cameras is the kind of trust-and-safety issue that can affect an entire account, not just one listing.

For hosts converting an existing home security setup into a holiday let, the practical implication is that any camera originally installed to watch the interior — a hallway camera used when the property was a normal home, for example — has to be removed or permanently disabled, not just turned off during guest stays, before the property is listed. An indoor camera that is only active between bookings still falls foul of the rule the moment it is capable of recording during a guest’s stay, so most hosts find it simpler to relocate or remove indoor units entirely rather than try to manage a switching schedule.

Where this leaves security-conscious hosts

The practical workaround most Airbnb hosts adopt is to concentrate security monitoring on entry points and exterior perimeter — front door, driveway, garden gates — where cameras are still allowed, clearly disclosed in the listing description, and genuinely useful for detecting unauthorised access or unexpected extra guests. Interior monitoring, if it is needed at all for a genuine business reason, has to happen through means Airbnb doesn’t restrict, such as noise monitors, rather than cameras.

The bottom line

Airbnb’s policy is now simpler than it used to be, even if it’s stricter: no cameras or recording devices inside a listing, full stop, regardless of disclosure; outdoor cameras and doorbell cameras are fine provided they’re disclosed and don’t look inward; and noise monitors are the disclosed alternative for indoor activity monitoring. Hosts who set up their listing’s security under the pre-2024 rules should specifically check for any indoor camera still installed, since that is the change most likely to catch out an existing host.

Sources

• Airbnb Help Center, “Restrictions on security cameras and other devices in homes” — airbnb.com/help/article/3061
• Airbnb Newsroom, “An update on our policy on security cameras” — news.airbnb.com

Video doorbells are sold as security devices, but many also record audio — and audio recording is regulated far more strictly than video in the United States. A homeowner who would never think twice about a camera pointed at their own porch can still end up on the wrong side of a state wiretap law if that camera’s microphone captures a conversation it had no business overhearing. This is a US-specific legal issue; UK rules for cameras are covered separately under data protection law rather than wiretap statutes.

Why audio is treated differently from video

Filming your own porch, driveway or front garden is generally lawful across the United States, because there is no reasonable expectation of privacy in a space visible from the street. Audio is a different legal category. Federal law — the Wiretap Act — prohibits secretly recording a conversation that the people involved reasonably believed was private, though it only requires one party to the conversation to consent. Many states go further and require all-party consent, meaning everyone whose voice is being picked up would need to agree to being recorded, not just the homeowner.

A number of states currently apply this stricter all-party consent standard to audio recording, including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington. In these states, a doorbell camera’s microphone capturing a private conversation between two other people — a courier and a neighbour, for instance, or two visitors talking on your porch — without their knowledge can, in principle, expose the homeowner to the same liability as any other illegal recording. Exactly which states count, and under what exceptions, is subject to court interpretation and can change, so this is not an exhaustive or static list.

What the case law actually shows

The clearest real-world test of this came out of New Hampshire, a two-party consent state, in the 2020 case State v. Burke. A Ring doorbell had recorded audio of an argument, and the defendant argued the recording should be inadmissible under the state’s all-party consent law. The court disagreed, ruling the audio was admissible because the conversation happened in a public-facing space where the parties “should have expected their argument to be overheard by the public” — meaning it did not meet the legal definition of a private communication in the first place.

That ruling narrowed the practical risk for doorbell owners, but it did not eliminate it, and legal commentary on the case has been clear that the underlying question is still unsettled in many states. A county attorney quoted in coverage of the issue noted that “many questions about the legal status of Ring doorbell audio recordings are still unanswered,” and warned that homeowners could, in principle, be exposed to liability simply by leaving the audio feature switched on in a state with strict consent rules — even though enforcement against ordinary homeowners for this specific scenario has been rare.

What actually reduces the risk

Legal commentary on smart doorbells converges on a few practical points rather than a single fix. Visible disclosure matters: a sign or sticker indicating that the property is monitored by video and audio makes it harder to argue that a conversation nearby was intended to be private, which is the core test most all-party consent laws apply. Placement also matters — a doorbell positioned to capture conversations happening well back from the door, inside a neighbour’s garden, or on a public sidewalk where people are not addressing your household, carries more risk than one that mainly picks up whoever is standing directly in front of it.

Many doorbell manufacturers now let owners disable audio recording entirely while keeping video active, which removes the wiretap question altogether at the cost of losing audio evidence. Homeowners in a strict all-party consent state who want audio evidence of package theft or intruders, but are uneasy about incidental conversations, sometimes compromise by keeping audio on but reviewing and deleting recordings that clearly only captured a private exchange between third parties rather than anything relevant to security.

The bottom line

Video from a doorbell camera pointed at your own property is on solid legal ground almost everywhere in the US. Audio is the part that varies by state, and in the twelve all-party consent states it carries a real, if rarely enforced, legal risk when it captures a private conversation between other people. Visible signage, sensible placement and knowing your state’s consent rule are the practical safeguards; assuming video rules also cover audio is the mistake most likely to cause a problem.

Sources

• Richmond Journal of Law and Technology, “Smart Doorbells and the Legality of the Audio Recording Feature” — jolt.richmond.edu
• UpCounsel, “Audio Surveillance Laws by State: Consent and Workplace Rules” — upcounsel.com/audio-surveillance-laws-by-state

If you keep cash, jewellery or important documents at home, the safe you buy is only useful to your insurer if it carries the right rating. UK home insurers do not simply ask whether you own “a safe” — they ask which security grade it meets, because that grade determines how much they will actually pay out if it is broken into. Understanding how that grading system works, in the UK, is the difference between a safe that genuinely protects a claim and one that leaves you significantly underinsured.

What EN 1143-1 actually tests

EN 1143-1 is the European standard used to test and certify high-security safes and strongrooms against forced and violent attack. Independent testing laboratories — such as ECB-S or VdS — subject a safe to a defined attack using tools, drills and other methods within a set time limit, and the safe is graded according to how much resistance it demonstrates. This is different from a fire rating, which measures heat and smoke resistance rather than burglary resistance, and the two are often confused because many domestic safes are sold with both fire and security claims on the same box.

The result is a series of “Eurograde” classifications, running from Grade 0 up through higher grades used mainly in commercial and vault settings. Each grade corresponds to a maximum amount of cash that insurers will typically cover if it is stored inside a safe of that grade overnight.

What each grade is worth to an insurer

Industry rating tables published by UK safe suppliers set out broadly consistent cash limits by grade: Eurograde 0 is typically recognised for cash cover up to around £6,000, Eurograde 1 up to around £10,000, Eurograde 2 up to around £17,500, and Eurograde 3 up to around £35,000, rising further at Grades 4 to 7 into the tens and hundreds of thousands for higher-value commercial use. For non-cash valuables — jewellery, watches, and similar items — insurers commonly apply a multiplier of around ten times the cash rating, so a Grade 1 safe recognised for £10,000 cash might support roughly £100,000 of valuables cover, subject to the policy’s own terms.

These figures are industry conventions rather than a single fixed legal standard, and they vary between insurers. The single most reliable step, before buying a safe specifically to protect a claim, is to ask your insurer in writing what grade and cash/valuables limit they require for your policy, rather than assuming a generic table applies. Some insurers specify a grade explicitly in the policy wording for higher-value contents cover; others simply reserve the right to reduce a payout if the safe used does not meet a “reasonable” standard.

Installation matters as much as the grade

A certified safe only keeps its rating if it is installed the way the manufacturer and certification body intended. Most EN 1143-1-rated safes are designed to be bolted to a solid floor or fixed into a wall cavity; a heavy safe simply standing free in a cupboard is both easier to remove entirely and, in some cases, technically outside the terms the insurer relied on when accepting the rating. If a safe is portable enough for two people to carry it out of the house, its contents are at far greater risk regardless of how strong the door and walls are, and some insurers will treat an unanchored safe as unrated in practice.

Buying for the claim you actually want to make

Because the cash and valuables limits scale steeply with grade — and because higher grades cost significantly more and weigh considerably more — it is worth working backwards from what you actually need to insure rather than buying whatever safe looks most secure. A household keeping occasional cash and a modest amount of jewellery is unlikely to need anything above Grade 1 or 2; a household with substantial jewellery, a valuable watch collection or business cash floats may need Grade 3 or above, and should check whether that requires professional installation and a monitored alarm connection as a condition of full cover.

It is also worth checking the safe’s actual certification documentation rather than relying on marketing language. “Fire resistant” and “high security” are not EN 1143-1 grades, and a safe advertised loosely as “insurance approved” should still show a specific Eurograde and a certificate number from a recognised testing body. Insurers assessing a claim after a break-in will typically ask for that documentation, not the marketing copy on the box.

The bottom line

An EN 1143-1 grade is not a marketing badge — it is the figure your insurer will actually use to decide how much of your claim they honour if the safe is broken into. Matching the grade to what you keep inside it, confirming the specific limit with your own insurer, and installing the safe correctly are the three things that turn a safe from a deterrent into cover that pays out.

Sources

• London Safes, “Insurance Ratings Explained” — londonsafes.co.uk/pages/insurance-ratings-explained
• Total Locker Service, “Safe Insurance Ratings UK: Euro Grades Guide” — total-locker-service.com/blog/safe-insurance-ratings-uk-euro-grades

Security advice aimed at a typical suburban semi does not map cleanly onto a farmhouse at the end of a half-mile track, or a rural property with outbuildings, machinery and no near neighbours. The most consistently cited data source for this specific problem is NFU Mutual’s annual Rural Crime Report, compiled from the insurer’s own claims data and used widely by police rural crime teams and farming organisations to track how theft patterns on rural and isolated properties are actually changing year to year.

What the most recent report actually shows

According to NFU Mutual’s Rural Crime Report, the estimated cost of rural crime across the UK fell to £41.5 million in 2025, a 6% decline on the previous year and part of a downward trend from £52.8 million in 2023. That headline fall masks sharp movement in individual categories: agricultural vehicle theft claims rose by 18% to an estimated £8.3 million, quad bike and ATV theft rose 31% to around £3.5 million, and livestock theft increased by nearly 30% to £4.5 million, even as GPS unit theft fell dramatically, down 80% year on year to under £250,000, reflecting wider use of tracking and immobilisation technology on that specific equipment category. The report also shows the picture is not uniform across the UK: while the overall UK cost fell, costs in Scotland rose 14% to £1.4 million and in Northern Ireland rose 24% to £2.2 million over the same period.

Why the trend lines matter more than the headline figure

A single falling national total can be misleading if the underlying drivers are moving in opposite directions. The sharp fall in GPS theft alongside a sharp rise in vehicle and livestock theft suggests targeted security investment is working where it has actually been applied — GPS units are now commonly protected by tracking, immobilisers and secure storage recommended by insurers — while categories without the same level of hardening, particularly livestock and quad bikes, are becoming relatively more attractive to thieves. NFU Mutual’s own reporting notes that 91% of its agents say rural crime continues to disrupt farming in their areas, which is a reminder that a falling national cost figure does not mean the risk has gone away for any individual property.

What this means for securing an isolated property

The data points toward a few practical priorities that differ from a standard urban security checklist. Machinery and vehicles benefit disproportionately from tracking devices, wheel clamps, and secure, lockable storage out of view from the road, given how much of the recent cost increase is concentrated in vehicle and ATV theft specifically. Livestock security, an area with little equivalent on a suburban property, is now a large enough claims category that visible signage, regular physical checks and, where practical, marking or tagging systems are worth treating as a genuine security measure rather than just a farming management task.

Isolation itself is a factor the data implicitly supports addressing directly: a monitored alarm system with a reliable signalling path matters more on a property where a break-in or theft might otherwise go unnoticed for hours, and a property with poor mobile signal should specifically check that any alarm or camera system has a backup signalling method, since a system that silently fails to report an event over a weak connection provides no real protection at all, whatever grade of equipment is installed.

Finally, because NFU Mutual is also a major rural insurer, its report is not a neutral academic source; it has a commercial interest in promoting security measures that reduce claims. That does not make the underlying claims data wrong, but it is worth treating the figures as a genuine, large-sample indicator of trends rather than a complete national crime statistic, and cross-referencing with your own regional police rural crime team, most of which now publish local intelligence and advice specific to farm and isolated-property crime in their area.

Layering security on a property without near neighbours

On a suburban street, a neighbour noticing an open gate or a strange vehicle is itself a form of passive security that isolated properties simply do not have. That absence is worth compensating for deliberately rather than assuming standard equipment will perform the same role. Motion-activated lighting and cameras covering approach routes, rather than just the immediate area around the house, give more useful warning time on a property where the nearest help may be several minutes away rather than a shout over the fence.

Gated or restricted access to the property itself, even a simple field gate kept closed and locked at the public road rather than only at the farmhouse, changes the calculation for anyone casing a rural property, since it removes the ability to drive in, load a vehicle or trailer, and leave quickly and unseen. Combined with visible signage referencing an active alarm or camera system, this kind of layered approach reflects what the crime data actually shows: theft on isolated properties is disproportionately opportunistic and vehicle-dependent, and measures that slow down or disrupt a quick vehicle-based theft tend to matter more here than they would on a typical urban property.

Sources

• NFU Mutual – Rural Crime Report
• NFU Online – coverage and figures from the NFU Mutual Rural Crime Report

Most homeowners installing a video doorbell or CCTV camera assume it is purely a personal decision, no different from choosing a burglar alarm. Often that is true. But the Information Commissioner’s Office (ICO), the UK’s data protection regulator, has published specific guidance making clear that once a camera captures anything beyond your own property boundary, you are no longer simply a private homeowner in the eyes of data protection law — you become a data controller with real obligations.

Where the “domestic purposes” exemption stops applying

According to the ICO’s guidance for people using home CCTV systems, if a camera is set up so that it captures images only within the boundary of your own private property, including your garden, then UK data protection law does not apply to that footage at all; it falls within the domestic purposes exemption. That changes the moment the camera’s field of view extends beyond your boundary: capturing a neighbour’s garden, a shared driveway, a communal hallway or a public footpath or street takes the system outside the exemption, and the ICO’s guidance is explicit that data protection law then applies in full.

This is a wider trigger than many owners expect. A doorbell camera angled to also catch the pavement, or a garden camera that incidentally sweeps across next door’s fence line, is enough to bring the whole system into scope, even if capturing the neighbour’s property was never the intention behind installing it.

What actually changes once the exemption stops applying

Once your CCTV captures beyond your boundary, the ICO’s guidance sets out several concrete obligations. You should limit what the camera records to what is genuinely necessary rather than the widest angle available, and point cameras away from neighbouring property, public areas or communal spaces where that is practically possible. You need clear signage indicating that CCTV is in operation, footage must be stored securely and access restricted to people who genuinely need it, and it should be deleted on a regular or automatic schedule rather than kept indefinitely. Critically, if someone who appears in your footage asks to see it, you are expected to be able to respond to that request appropriately, in the way any other data controller would handle a subject access request.

The guidance treats audio capture the same way as video: if a camera or doorbell records sound that identifies or affects someone outside your property, that recording is personal data too, and the same obligations apply. Continuous audio recording of a shared path or a neighbour’s garden is generally more intrusive than video alone, and the ICO’s guidance specifically flags this as something to think carefully about rather than leave switched on by default.

Practical steps for anyone installing or reviewing a system

Before fitting a camera, walk through what it will actually capture at different times of day, not just its default factory framing, since many smart cameras ship with a wide field of view intended to cover the largest possible area. Angling a camera to focus on your own doorway or driveway rather than a wide sweep of the street is often enough to keep a system within the domestic exemption while still deterring the opportunistic doorstep theft or package theft it was bought for.

Where some capture beyond the boundary is unavoidable, for example a terraced house where the pavement is directly in front of the door, the ICO’s own recommended good practice is to apply privacy filters or masking to blank out the parts of the image that are not genuinely needed, use clear signage, and be prepared to explain your reasoning and respond to a request if a neighbour or passer-by raises a concern. The ICO’s guidance also suggests that a conversation with neighbours before installation, where practical, tends to prevent the kind of dispute that otherwise ends up as a formal complaint to the regulator.

None of this stops you fitting a doorbell camera or CCTV system; the ICO is explicit that domestic security is a legitimate reason to have one. What it changes is the assumption that, because it is your camera on your house, no one else’s rights are in play once the lens points past your own front gate.

What happens if a neighbour complains

If a neighbour raises a concern about your camera, the ICO’s own process is generally the second step, not the first. Its guidance encourages people to try to resolve the issue directly with the camera owner before making a formal complaint, and in practice most disputes are resolved by adjusting the camera’s angle, adding a privacy mask over a specific area, or agreeing signage, without ever reaching the regulator. If a complaint is made to the ICO and data protection law is found to apply, the regulator’s usual first response is to work with the camera owner to bring the system into compliance rather than to impose a penalty immediately, though repeated or wilful non-compliance can escalate further.

Doorbell cameras deserve a specific mention because their default field of view is often wider than owners realise, commonly capturing a strip of pavement or a section of a neighbour’s boundary as a side effect of covering the full width of a front door. Checking the actual recorded footage, not just the live preview shown in the app, is the most reliable way to find out what a system is really capturing before assuming it stays safely within your own boundary.

Sources

• ICO – Guidance for people using home CCTV systems

Ask an insurer why they want an “NSI Gold” or “SSAIB-approved” alarm system and most homeowners have no way to check whether the installer they are considering can actually meet that requirement. The answer sits in a technical standard most people never see: BS EN 50131, adopted for UK installation practice via PD 6662, which grades intruder alarm systems from 1 to 4 according to the sophistication of intruder they are designed to resist.

What the grades actually mean

According to guidance published by SSAIB, one of the two UKAS-accredited certification bodies operating in this sector, systems are classified from Grade 1, intended for low-risk premises where intruders are assumed to have little knowledge of alarm systems, up to Grade 4, intended for premises where intruders are assumed to have the ability and resources to plan a detailed attack, such as high-value commercial or government sites. For most residential and small commercial properties, the relevant grade in practice is Grade 2, which is the level most home and farm insurers specify when they require an accredited installation, with Grade 3 reserved for higher-value properties or specific insurer requirements.

How NSI and SSAIB certification maps onto the grades

NSI and SSAIB are the two certification bodies UK insurers and police forces recognise for alarm installation competence. Per SSAIB’s own guidance for insurers and specifiers, an installer’s certification level corresponds to the grade of system they are approved to design, install and maintain: broadly, NSI Silver or the SSAIB equivalent aligns with Grade 2 installations suitable for most homes, while NSI Gold or SSAIB’s higher tier aligns with Grade 3 work for higher-risk or higher-value premises. When an insurance policy specifies “NSI or SSAIB approved,” it is almost always asking for Grade 2 as a minimum on a domestic property, not the highest grade available.

Why the grade matters beyond the insurance paperwork

The grade is not just a compliance box to tick. It reflects real differences in how the system is engineered, including the type and positioning of detectors, how tamper-resistant the control panel and wiring are, and how the system signals an alarm event to a monitoring centre or keyholder. A Grade 1 system installed on a property an insurer expects to be Grade 2 is not simply a paperwork mismatch; it may genuinely be easier to defeat, because Grade 1 specifications assume a far less capable intruder than Grade 2 does.

Grading also underpins whether a monitored alarm is eligible for a police response at all. A system that reports to an Alarm Receiving Centre (ARC) and has been issued a Unique Reference Number (URN) can, under National Police Chiefs’ Council policy, generate a police response to a confirmed activation, but per SSAIB’s guidance only installations backed by a valid certificate of compliance from a body like NSI or SSAIB are eligible for a URN in the first place. An uncertified installer, whatever grade of equipment they fit, generally cannot get a system onto that police-response footing.

What to check before signing off on an alarm quote

When comparing quotes, it is worth asking three direct questions: what grade is being proposed for your specific property and insurance requirement, is the installer’s certification (NSI or SSAIB) current and at the right level for that grade, and does the proposed system include monitoring and a URN if that is what your insurer or your own risk assessment requires. A quote that is noticeably cheaper than others is sometimes cheaper because it specifies a lower grade or omits monitoring altogether, which only becomes apparent if you ask the grading question directly rather than assuming “alarm system” means the same thing across every quote.

It is also worth re-checking your policy wording rather than assuming your existing alarm still meets it. Insurers periodically update minimum requirements, particularly after a claim, and a system installed years ago to a lower grade may no longer satisfy a renewed policy even though it still works perfectly well as a deterrent.

Maintenance and re-certification

Grading is not a one-off assessment carried out at installation and then forgotten. Both NSI and SSAIB require certified installers to maintain systems under a service schedule, and a lapsed maintenance contract can invalidate the certification behind a URN just as effectively as never having had one, even though the physical equipment is unchanged. If you have inherited an alarm system from a previous owner, it is worth confirming directly with the installer named on the system, or with NSI or SSAIB, whether the certification and maintenance contract transferred with the property or lapsed at the point of sale, since a silent alarm panel with an old sticker on it is not the same thing as an active, certified Grade 2 system.

Where a property has unusual features, for example large areas of glazing, multiple outbuildings, or a layout that makes external detection difficult, an installer working to BS EN 50131 is expected to reflect that in the design rather than applying a generic Grade 2 template regardless of the site. Asking to see a written risk assessment, rather than just a quote for a fixed number of sensors, is a reasonable way to check that the grading has actually been thought through for your specific property.

Sources

• SSAIB – Guidance for insurers and specifiers on alarm grading and certification

Smart locks, video doorbells and app-controlled alarm hubs have become a normal part of UK home security, but until recently there was no legal minimum for how securely those devices themselves had to be built. Since 29 April 2024, there is. The Product Security and Telecommunications Infrastructure Act 2022, together with its 2023 regulations, sets baseline cybersecurity requirements for consumer connectable products, and it directly covers the category of equipment this site compares.

What the Act actually requires

The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023 came into force on 29 April 2024, giving manufacturers, importers and distributors of “relevant connectable products” a set of minimum security duties. Based on the GOV.UK product security factsheet and the underlying legislation on legislation.gov.uk, the regime centres on three core requirements. First, a ban on universal default passwords: devices can no longer ship with weak, guessable factory logins such as “admin” or “1234”; passwords must either be unique per unit or set by the user during setup. Second, manufacturers must publish a vulnerability disclosure policy, giving security researchers a route to report flaws before they can be exploited maliciously. Third, manufacturers must be transparent about the minimum period a product will keep receiving security updates, so a buyer knows upfront how long a smart lock or camera is supported before it stops being safe to trust with an internet connection.

What counts as a “relevant connectable product”

The regime applies broadly to consumer products that can connect to the internet or to other devices, which in a home security context covers smart locks, Wi-Fi and app-connected cameras and video doorbells, alarm hubs, and sensors that report to a phone app or cloud service. It sits within the government’s wider “Secure by Design” programme for consumer Internet of Things devices, which had previously operated as a voluntary code of practice before being put on a statutory footing through this Act.

Who enforces it

The Office for Product Safety and Standards (OPSS), part of the Department for Business and Trade, enforces Part 1 of the Act and the 2023 Regulations on behalf of the Department for Science, Innovation and Technology. OPSS has powers to issue compliance notices, stop notices and recall notices against non-compliant products, and the Act allows for financial penalties, reported as being up to £10 million or 4% of a company’s qualifying global revenue, whichever is higher, for serious or repeated breaches.

What this actually changes for someone buying a smart security device

In practical terms, it should now be harder to buy a smart camera or lock that ships with an unchangeable default password, one of the most common ways cheap connected devices have historically been compromised at scale. It does not mean every device on the market is automatically safe: the regime sets a legal floor for password practices, vulnerability handling and update transparency, not a certification that a specific product is well engineered. A device can technically comply with PSTI and still have a short minimum support period, meaning it stops receiving security patches well before it physically wears out.

It is also worth understanding what PSTI does not do. It does not require pre-market certification or independent testing of every device before sale, unlike, for example, the PAS 24 test applied to doorsets under Building Regulations. Compliance is largely a manufacturer self-declaration backed by OPSS’s power to investigate and act after the fact, which means a genuinely non-compliant product can still reach UK shelves and marketplaces before it is identified and removed. Buyers researching a specific brand are still better served by checking independent reviews and any OPSS recall notices than assuming the presence of a UK retailer listing is itself proof of compliance.

Because the requirements fall on manufacturers, importers and distributors rather than retailers acting purely as a marketplace, buyers researching a smart lock or camera have a reasonable basis to ask a specific question before purchase: what is the stated minimum security update period, and where is the vulnerability disclosure policy published? A manufacturer that cannot answer either question directly is a weaker bet for a device that will sit on your home network controlling physical access, regardless of how well reviewed its app is.

The security update period is worth paying particular attention to. A budget smart camera with a two-year minimum support commitment may be perfectly adequate if you plan to replace it within that time, but the same device left running for five or six years, well past its stated support window, is a device that will keep working functionally while quietly losing the vulnerability patches that keep it safe. That gap between “still works” and “still secure” is exactly the problem PSTI’s transparency requirement is designed to make visible, provided the buyer actually checks the figure before it is forgotten about.

What it does not cover

PSTI is a product cybersecurity regime, not a physical security or installation standard. It has no bearing on whether a smart lock’s mechanical components resist physical attack, which is a separate question governed by standards such as PAS 24 for doorsets or BS3621 for traditional mortice locks. A smart lock can be fully PSTI-compliant on the software side while still being a poor mechanical choice for a final exit door, so the two should be checked independently rather than treating “PSTI compliant” as a general security seal of approval.

Sources

• GOV.UK – Product Security and Telecommunications Infrastructure: product security factsheet
• legislation.gov.uk – Product Security and Telecommunications Infrastructure Act 2022
• GOV.UK – Secure by Design collection (OPSS)

Buy a new-build home in England and the sales brochure may mention “Secured by Design” or simply that the property “meets Building Regulations.” These are not the same thing, and only one of them is a legal minimum every new dwelling must meet. That minimum is set out in Approved Document Q, and most homeowners have never read it, even though it determines exactly how resistant their front door and ground-floor windows are supposed to be to a casual break-in attempt.

What Approved Document Q actually covers

Approved Document Q supports Requirement Q1 of Schedule 1 to the Building Regulations 2010, which requires that “reasonable provision must be made to resist unauthorised access” to a dwelling. According to the guidance published on the Planning Portal, it applies to doors and windows that are “easily accessible” — broadly, ground-floor openings and any upper-floor opening reachable from a flat roof, balcony or similar structure — in newly built dwellings. It took effect on 1 October 2015 for use in England, and it also applies to building work on excepted energy buildings in Wales, but it does not extend to Scotland or Northern Ireland, which regulate new-build security through their own separate frameworks.

Crucially, Document Q is a new-build control. It is triggered by the Building Regulations application for a new dwelling, not by someone replacing a door or window in an existing home. If you are re-fitting your own front door, Document Q itself does not compel you to use a tested product — though your insurer or a separate FENSA/CERTASS competent-person scheme may still expect one.

PAS 24: the test standard behind the requirement

To demonstrate compliance, doors and windows in scope are expected to meet PAS 24, the Published Assessment Specification for enhanced security performance of doorsets and windows. PAS 24 is not a test of an individual lock or handle in isolation; it is a whole-assembly performance test covering the frame, glazing, seals, hinges, locking hardware and the way they work together, subjected to standardised manual and mechanical attack methods for a defined period. A doorset that passes has demonstrated it can resist the tools and techniques typically used by an opportunistic burglar for long enough to make the attempt not worth continuing, not that it is unbreakable.

How this differs from Secured by Design and BS3621

Secured by Design, the official police-backed crime prevention initiative, is a voluntary specification that developers can choose to build to. It generally goes further than the Document Q minimum, because it looks at a whole development — layout, boundary treatment, lighting and communal areas — rather than just the doors and windows of an individual dwelling, and it uses PAS 24 compliance as one component of a wider accreditation rather than as the entire requirement. Not every new-build meets Secured by Design; every new-build in England is, in principle, required to meet Document Q.

BS3621, by contrast, is a lock standard used mainly in the existing-homes insurance market, specifying five-lever mortice locks with a minimum number of key differs and resistance to drilling and picking. It sits alongside Document Q rather than replacing it: a new-build doorset can be PAS 24 tested as a complete assembly without using a BS3621 mortice lock at all, since many PAS 24 doorsets use multipoint locking systems with rated cylinders instead.

What this means if you are buying or renovating

If you are buying a new-build home, the building control completion certificate and the developer’s specification should confirm that ground-floor and easily accessible doors and windows meet Document Q via PAS 24. It is a reasonable question to put to a sales team directly, and reputable developers should be able to point to the relevant test certificates for the doorset and window systems used, rather than a general reference to “toughened glass” or “multipoint locking,” neither of which is a substitute for the PAS 24 test itself.

If you are renovating or extending an existing home, be aware that a material change of use, a loft conversion creating new independent access, or certain large extensions can bring Document Q into scope for the new work even though the original dwelling was never covered by it. This is worth raising with your building control body or approved inspector at the design stage rather than after windows have already been ordered, since retrofitting a compliant doorset is considerably more disruptive than specifying one correctly the first time.

Finally, Document Q sets a floor, not a ceiling. It does not cover back doors or windows that are not “easily accessible,” it says nothing about intruder alarms, and it does not evaluate the wider layout of a street or estate the way Secured by Design does. A new-build home that meets Document Q has a legally required baseline of resistance on its most vulnerable openings; anything beyond that, from alarm systems to additional door furniture, remains a choice for the homeowner.

Sources

• Planning Portal – Approved Document Q: Security, Dwellings
• GOV.UK – Building Regulations Approved Documents (collection)