Last reviewed: August 2026
Picture this: someone walks out of a shop with £180 of stock, twice in the same week. Under the old rules, that's a summary-only matter, often dealt with quietly if at all. The Crime and Policing Act 2026 is meant to change that. Theft becomes theft, whatever the value on the receipt. Assaulting a shop worker gets its own criminal offence.
None of that is live yet. And even once it is, the Act doesn't do the hard part for you. It only makes prosecution possible. Whether it actually happens still depends on one thing: can your CCTV identify the person who did it?
We know what "evidence-ready" looks like because it's what our accreditation is built on. We're family-run from our Southend HQ, in business since 1979, NSI Gold approved and SSAIB certificated. Big enough to cope with multi-site retail estates, small enough to care about every camera angle. Get any one of the three checks below wrong and the prosecution the Act was meant to enable can stall before it starts - not because the law failed, but because the footage did. They're worth running against your own CCTV this week, before an incident forces the question, not after.
What does "evidence-ready" actually mean in practice? It means the camera caught a face, not just a shape, at the moment it mattered. It means the footage is still there when the report finally gets logged, not quietly overwritten while the paperwork catches up. And it means the file opens cleanly on your local force's system instead of stalling an officer at the worst possible moment. Miss any one of those and the Act's tougher penalties have nothing to bite on.
The Crime and Policing Act 2026 received Royal Assent on 29 April 2026. Part 3, headed "Retail Crime," contains three sections that matter to anyone running CCTV in a retail setting.
Section 45 creates a standalone offence of assaulting a retail worker. It carries a maximum penalty of six months in prison and/or an unlimited fine, according to the Home Office's retail crime factsheet on gov.uk. Section 46 requires a court to impose a Criminal Behaviour Order on first conviction, unless a custodial or other order already applies. A CBO - a civil order - can bar someone from named premises. Breaching a CBO is itself a criminal offence.
Section 47 repeals the £200 threshold that let low-value shop theft be tried only in a magistrates' court. Mechanically, it removes section 22A of the Magistrates' Courts Act 1980 - the provision inserted by section 176 of the Anti-social Behaviour, Crime and Policing Act 2014 that created the threshold in the first place. Once in force, all shop theft becomes an either-way offence. That means it can go to the Crown Court, with a maximum sentence of seven years.
Here's the part that gets missed in most of the coverage. The Crime and Policing Act 2026 (Commencement No. 1 and Saving Provision) Regulations 2026 brought a first tranche into force on 29 June 2026. That tranche covered anti-social behaviour powers, firearms offences and several others. It didn't commence sections 45, 46 or 47. Today, assault on a shop worker is still charged as common assault or ABH (actual bodily harm). Low-value theft is still triaged as summary-only. The retail provisions are enacted, but not yet in force. A further commencement regulation is what will change that.
The £200 threshold was widely treated as a "licence to steal," and the government has said as much. But repealing it doesn't, by itself, put more offenders in front of a court. It removes a technical barrier to charging. What determines whether a case actually proceeds hasn't changed. It still comes down to usable evidence, a coherent incident record logged with a crime reference number and a statement that stands up.
The scale of the problem isn't in dispute. The British Retail Consortium (BRC) Crime Report 2026 covers the year to August 2025. Its figures show around 1,600 daily incidents of violence and abuse against shop workers, down roughly 20% on the year before. Physical violence itself barely moved, at 118 incidents a day. Thirty-six of those a day involved a weapon.
The BRC also recorded 5.5 million detected theft incidents, costing close to £400 million. Separately, the Office for National Statistics recorded 509,566 police-recorded shoplifting offences for the year ending December 2025 - a fraction of the BRC figure. The two measure different things. ONS counts what reaches police records; the BRC counts what retailers detect.
"Retail theft is a significant challenge for retailers, with our own figures showing 5.5m detected incidents of theft last year… the rise in organised crime is particularly worrying as gangs systematically target one store after another across the country."
Lucy Whing, Crime Policy Adviser, British Retail Consortium
That pattern - the same offenders, the same stores, repeatedly - is exactly why blanket camera coverage is the wrong starting point. Scotland offers an honest preview of what happens next. Its equivalent standalone offence has been in force since 2021 and Police Scotland logged over 10,000 reported cases with a detection rate above 60%. Yet according to the Scottish Grocers' Federation, only around 11.6% of reported cases resulted in a conviction. A new offence drives reporting and recording up quickly. Conviction still depends on the quality of the evidence and on court capacity - neither of which the legislation itself supplies. The same imbalance opens up for English retailers the moment section 47 commences. A chargeable offence, with no matching improvement in the evidence base underneath it - unless that's fixed first.
None of this requires waiting for a commencement date. The three checks below are things you can run against your existing system now. They're the same checks our engineers work through during an operational requirement (OR) survey. That's the document that specifies what your commercial CCTV System needs to achieve.
A familiar pattern: your best camera covers the car park. Your till point - where every confrontation actually happens - gets a wide-angle view from the ceiling that shows the top of everyone's head.
The College of Policing's Crime Reduction Toolkit rates targeted, hot-spot-led measures as having the strongest evidence base for reducing crime. It rates CCTV itself as moderately useful for property crime evidence, but weak on its own for deterring violence. The practical lesson: point your cameras at where incidents on your premises actually cluster, not at where a default installation happened to put them.
This is the same ground we cover on a site survey. Walk your own incident log, till exceptions and any recent theft or confrontation reports. Then check three things at each pressure point - entrances, the till or point of confrontation and stock or delivery access:
Miss any one of those three and the footage still exists - it's just not usable as identification evidence.
A surprising number of these failures turn out to be mechanical rather than technical: a dirty or misted housing, a camera knocked out of alignment during a stock delivery or firmware that's never been touched since installation day. None of that shows up on a walk-through. It only shows up when someone actually needs the footage.
A site survey also checks pixel density against the standard your system was specified to. BS EN 62676-4:2015 is the older application-guidelines standard many existing CCTV Systems were designed to. It uses a four-step pixel-density scale measured in pixels per metre (PPM). Its successor, BS EN IEC 62676-4:2025, published in November 2025, supersedes it with a revised seven-step pixel-density model. Both editions currently sit alongside each other during a transition period. The key question for an existing site is which edition your operational requirement was written against. Do your entrance and till cameras still achieve the required density at those exact points? Not just "high definition" in general terms. Get it right and the difference is simple: a face in frame instead of a shadow, at the exact point your incidents actually happen.
Most CCTV retention settings get decided once, at installation and never revisited. Thirty days is a common default - nobody chose it for a reason and few ever ask why. It's worth knowing where that number actually comes from.
There's no statutory retention period for CCTV footage under UK law. The oft-quoted "30 days" is industry convention, not a legal requirement. UK GDPR and the Data Protection Act 2018 govern any footage that captures identifiable people. You need a lawful basis for recording and clear signage. Where the processing is high-risk, the Information Commissioner's Office (ICO) expects a documented data protection impact assessment (DPIA) before you start. Under the storage limitation principle, your retention period should be one you can justify to the ICO - not one you inherited.
Once the threshold repeal commences, more incidents become worth pursuing and the gap between an incident and a formal evidence request can stretch out. A retention window set for convenience isn't the same as one set for how long a report realistically takes to log, escalate and request. Get the two out of step and the footage may already be gone. Check your documented retention period against how your own reporting and escalation process actually runs. Don't just default to the number the installer set years ago.
Then the moment comes: an incident happens and you pull the footage with confidence. The export turns out to be too compressed, in the wrong format or missing the timestamps the officer needs. You find out at the worst possible moment.
Retailer satisfaction with police response has been low, but it's improving. The BRC Crime Report 2026 recorded just 13% of retailers rating the response good or excellent for the year to August 2025. That's up from 9% previously. Part of that gap sits with policing capacity. The National Police Chiefs' Council's Retail Crime Action Plan commits forces to prioritise attendance. That includes cases where an offender has been detained by store security or where evidence needs securing on scene. Part of the gap sits with retailers supplying footage that isn't actually usable. You can only influence the second one.
Before an incident, not after, this is exactly the kind of check we build into a proper site visit. Police forces increasingly handle CCTV submissions through a formal digital evidence platform. The College of Policing's own guidance on schemes such as Operation Shopkeeper points to systems including NiCE Investigate. So "usable" has a specific, checkable meaning. When we test a sample export against that standard, we check four things:
If your system is monitored and detector-activated, rather than passive recording, a different standard applies: BS 8418:2021. This is the British Standard for remotely monitored CCTV. It's what lets an NSI (National Security Inspectorate) Gold approved or SSAIB (Security Systems and Alarms Inspection Board) certificated firm register a system with police. That registration is called a unique reference number or URN. We hold both certifications ourselves - SSAIB since 2002, NSI Gold since 2005. They're two independent audit regimes, both covering our CCTV design, installation and maintenance work. We can tell you whether registering for a URN is worthwhile for your site. We'll build it into the specification if a live police response matters to you. If you'd rather we ran these three checks with you than talked you through them, that's exactly what a site visit covers.
If we're not qualified to provide a service, we won't offer it - that's our Dedication to Accreditation. The same honesty applies to what we'll tell you CCTV can and can't do.
CCTV is genuinely useful for identification evidence after the fact. In practice it works best alongside other evidence, not instead of it. A written incident account, witness statements and any other footage or images available all strengthen a file. The College of Policing rates CCTV's evidence base as weaker for deterring violence in the moment. Evidence for retail tagging (EAS) is similarly mixed - a systematic review found no statistically significant overall deterrent effect, though visible tags outperform hidden ones.
No CCTV System can guarantee a police response. Attendance depends on factors outside our control, including local policing capacity. For monitored systems, it also depends on whether a URN is active - police can withdraw one under the long-standing "three strikes" false-alarm rule. No system stops a determined offender outright. What a well-specified, correctly retained and pre-tested system does is put the evidence in place for a prosecution to happen. That's the one part of this picture the legislation itself can't supply.
Planning a new system rather than auditing an existing one? See our guide to the questions worth asking before you invest in a CCTV System.
Not yet. The Act received Royal Assent on 29 April 2026, but sections 45 to 47 - the retail worker assault offence, the Criminal Behaviour Order requirement and the repeal of the £200 theft threshold - were left out of the first commencement order. The Crime and Policing Act 2026 (Commencement No. 1 and Saving Provision) Regulations 2026 brought a first tranche into force on 29 June 2026, covering anti-social behaviour powers and firearms offences, but not the retail provisions. Until a further commencement regulation names a date, assault on a shop worker is still charged as common assault or ABH and low-value theft is still triaged as summary-only.
Section 47 repeals the £200 threshold that currently lets low-value shop theft be tried only in a magistrates' court. Once in force, all shop theft becomes an either-way offence. That means it can be sent to the Crown Court, with a maximum sentence of seven years. That removes a technical barrier to charging, but it doesn't by itself put more offenders in front of a court. Whether a case actually proceeds still depends on usable evidence, a coherent incident record and a statement that stands up. None of that is something the legislation supplies. Scotland's equivalent standalone offence shows the gap: over 10,000 reported cases, but only around 11.6% resulting in conviction.
Section 45 creates a standalone criminal offence of assaulting a retail worker, carrying a maximum penalty of six months in prison and/or an unlimited fine. Section 46 requires a court to impose a Criminal Behaviour Order or CBO, on first conviction under Section 45. The exception is where a custodial or other order already applies. A CBO is a civil order that can bar a named individual from specified premises. Breaching a CBO is itself a criminal offence. Like Section 47, neither section is in force yet. Both received Royal Assent in April 2026 but were left out of the first commencement order. Assault on a shop worker is still charged as common assault or ABH for now.
There's no statutory retention period for CCTV footage under UK law - the commonly used 30 days is industry convention, not a legal requirement. UK GDPR and the Data Protection Act 2018 govern any footage capturing identifiable people, so you need a lawful basis for recording and clear signage. Because most retail CCTV counts as high-risk processing, the Information Commissioner's Office (ICO) expects a documented data protection impact assessment first. Under the storage limitation principle, your retention period should be one you can justify to the ICO, not an installer's default - and long enough to cover how long a report realistically takes to log, escalate and request. A gap between an incident and a formal evidence request can mean the footage is already gone.
BS 8418:2021 is the British Standard for remotely monitored, detector-activated CCTV - as opposed to passive recording that's only reviewed after the fact. It's what lets an NSI Gold approved or SSAIB certificated firm register a system for a police unique reference number or URN. That URN is a prerequisite for attracting a live police response to an alarm activation. A URN isn't permanent: police can withdraw one under the long-standing "three strikes" false-alarm rule. Whether this standard is relevant to your site depends on whether your system is monitored and detector-activated, rather than simply recording. It also depends on whether a live police response to an incident in progress matters to you.
The Crime and Policing Act 2026 is enacted but not yet in force on the retail provisions. Sections 45 to 47 await a further commencement regulation and until then the existing law applies. That gives you a genuine window to get ready, rather than react.
The three checks are worth running this week, in order:
Wait for a commencement date and you're reacting under pressure instead of preparing on your own schedule. Run the three checks now and the difference is far more likely to show on the day it matters. The face stays in frame. The footage is still there when the report is filed. The export opens without a scramble.
We've worked through this same audit with commercial and public-sector clients across Essex for years. Castle Point Borough Council has used us for CCTV and alarm systems installation and servicing. Their Operational Services Team Leader put it simply:
"Blakes have worked with Castle Point for a number of years installing and servicing our CCTV and alarm systems. They have always gone above and beyond to help look for solutions."
Tim Read, Operational Services Team Leader, Castle Point Borough Council
We can review your camera coverage, retention settings and evidential export workflow in a single site visit. It's the same visit where the surveyor who assesses your premises introduces you to the engineer who'll carry out any work that follows.
For multi-site retail groups, that consistency matters as much as getting any single site right. We aim for the same evidential standard, the same retention discipline and the same export format at every location - so one store manager isn't solving this from scratch while another site already has it sorted.
Book a free, no-obligation business fire & security survey to get started or browse our full commercial CCTV Security Systems page first.
Call us on 01702 447800 or get in touch online. We'll book your review in while it's still a planning exercise, rather than a scramble.
