There’s been a refinement to the Data Protection Act 1998 which means that retailers with basic CCTV cameras – the type that cannot zoom in and out – no longer have to register with the Information Commissioner. The thinking behind this is that you are not ‘targeting’ anyone with a static camera that is just there for your own protection. If you use it to keep tabs on staff though, you do need to register.