Why most small business CCTV doesn't work when it matters
There are two moments when business owners think about their CCTV: when they're buying it, and when they need it. The gap between those moments is where most CCTV systems fail. Cameras that seemed fine on the sales floor produce blurry, unusable footage when you need to identify someone. Storage fills up and footage is overwritten before an incident is discovered. Cameras pointed at the front door miss the angle that actually shows what happened at the till.
This guide is for NZ hospitality and retail owners who want to install or upgrade CCTV and actually have it work. We cover the legal obligations, the practical placement decisions, the resolution question, and the storage trade-offs.
NZ Privacy Act 2020 — what you must do
The Privacy Act 2020 applies to any business collecting personal information — and CCTV footage is personal information. For hospitality and retail operators, the key obligations are:
- Signage: Visible signs must inform people that surveillance cameras are operating. The sign should be at every entrance to the surveilled area. It doesn't need to say where the cameras are, but people must know they're being recorded before they enter.
- Purpose limitation: Footage collected for security purposes shouldn't be used for other purposes (like checking staff performance) without a legitimate basis. Keep this in mind if staff are within camera coverage areas.
- Retention limits: Don't keep footage longer than necessary. Most businesses retain 30 days as a standard period — enough for incidents to be discovered and reported, but not indefinite. Set your system to overwrite after your retention period.
- Access control: Footage should only be accessible to authorised people. Keep a log of who has accessed recordings.
- Privacy requests: If someone makes a privacy request asking whether they appear in your footage, you have 20 working days to respond. Have a process for this.
The Office of the Privacy Commissioner has guidance on CCTV at privacy.org.nz. For most small businesses, compliance is straightforward — the main things are signage and not keeping footage forever.
Indoor vs outdoor cameras
Indoor cameras don't need to be weatherproof, which gives you more options and usually lower cost. They do need to handle variable lighting — particularly the contrast between natural light from windows and darker interior areas. Look for cameras with Wide Dynamic Range (WDR) capability if you have this kind of environment (common in cafés with big windows).
Outdoor cameras need an Ingress Protection (IP) rating of at least IP66, meaning dust-tight and protected against heavy rain. For NZ conditions, IP67 (temporary immersion) is better for cameras under overhangs that might get spray. Outdoor cameras also need to handle low light — either via IR (infrared night vision) or colour night vision. IR gives monochrome footage after dark; colour night vision gives colour footage but requires some ambient light.
Resolution — what you actually need for insurance
Insurance companies and police have become more specific about what they'll accept from CCTV footage. A 720p camera covering a wide retail floor produces footage that's very unlikely to identify anyone. For a standard retail or hospitality environment, our minimum recommendation is:
- Entry/exit points: 4MP (2K) or higher, aimed to capture faces as people enter
- Till or register area: 2MP (1080p) minimum, with a tight framing to capture hands and face
- General floor/seating area: 2MP is adequate if coverage angle isn't too wide
- Car park: 4MP minimum — licence plates at distance require higher resolution
The camera resolution is only as useful as the lens field of view. A 4MP camera set to cover a 180-degree panorama will produce the same face resolution as a 1MP camera with a narrower angle. Placement and lens selection matter as much as the megapixel spec.
Placement in a café or retail shop
Standard placement priorities for hospitality and retail: front entrance (captures faces entering and exiting); point of sale/till (tight angle on transaction area); back-of-house entrance (staff entry, deliveries, storage); car park or outdoor seating (wider coverage, higher resolution). In a café, consider the counter area separately from the seating area — different cameras serve different purposes.
Avoid pointing cameras at areas where people have an expectation of privacy — bathrooms, changing rooms, staff-only areas without a legitimate purpose. This is both a legal obligation and good practice.
Cloud vs on-site storage
On-site NVR (network video recorder) storage is upfront cost, no ongoing fees, independent of your internet connection, but the recorder itself must be physically secured — a thief who steals the NVR takes the footage with them. Cloud storage avoids this problem but requires sufficient upload bandwidth and involves ongoing subscription costs that scale with the number of cameras and retention period.
For most small NZ hospitality and retail businesses, we recommend a hybrid: local recording for day-to-day access and reliability, with cloud backup for critical cameras (entry points, till areas) so footage is preserved even if on-site hardware is compromised. Our CCTV service covers full design, supply, and installation.