Compliance checklist · Security

What your website and marketing must show to stay compliant in security

The rules that apply to a UK security business, turned into what your site, ads and social posts must show, or must not say. Each point links to the regulator or the legislation it comes from.

General guidance, not legal advice. Rules change and depend on your circumstances; check the linked source or take advice from a qualified adviser before relying on any point.

Security rules

Security Industry Authority

SIA licensing and Approved Contractor Scheme

Show Approved Contractor Scheme status only while it is current, and do not advertise licensable work your staff are not licensed for.

Source: Security Industry Authority

Source being confirmed

BS 7858 security screening

Check what this rule requires you to display or avoid saying, and keep the site consistent with it.

We are confirming the primary source for this point.

NSI / SSAIB inspectorate certification

NSI or SSAIB inspectorate certification

Use inspectorate logos only for the services the certificate covers.

Source: NSI / SSAIB inspectorate certification

Source being confirmed

Police response URN policy NPCC

Check what this rule requires you to display or avoid saying, and keep the site consistent with it.

We are confirming the primary source for this point.

Surveillance Camera Code of Practice

GDPR and CCTV Surveillance Camera Code of Practice

Also covers: ICO registration CCTV data.

Say in the privacy notice what CCTV footage you hold, why and for how long; do not publish identifiable footage in marketing without a lawful basis.

Source: Surveillance Camera Code of Practice

Health and Safety at Work etc. Act 1974

Health and Safety at Work Act 1974

Safety claims in marketing ("fully compliant", "zero incidents") must be evidenced; show accreditations only while they are current.

Source: Health and Safety at Work etc. Act 1974

Working Time Regulations 1998

Working Time Regulations for guarding shifts

Shift patterns described in job adverts should be lawful.

Source: Working Time Regulations 1998

Every UK business site

Whatever the sector, these apply to almost every business website.

Company and trading details

A limited company's site must show its registered name, company number, place of registration and registered office address.

Source: Company and trading details

Privacy notice

Say who you are, what each form collects, why, how long you keep it and how people use their rights.

Source: Privacy notice

Cookie consent

Non-essential cookies and analytics wait for consent, and refusing is as easy as accepting.

Source: Cookie consent

Honest claims

Every claim, review and comparison is true, evidenced and not misleading (CAP Code).

Source: Honest claims

Genuine reviews

No fake, bought or selectively hidden reviews (DMCC Act 2024).

Source: Genuine reviews

See how your site measures up

The free grader checks your site against the visible signals buyers, search engines and AI assistants look for, including several of the points above.

Grade my website Security websites