Blog

Hotel CCTV checklist for 2026: what to audit before Martyn's Law arrives

Practical CCTV audit checklist for UK hotels in 2026. Camera coverage, monitoring, evidence, GDPR, and what changes when Martyn's Law enforcement begins in April 2027.

Hospitality2026-06-0110 min readBy Archangel Team

The 14-point hotel CCTV audit

Most hotels we work with have CCTV. Most have not audited it against current expectations. This is the practical checklist we walk new clients through in the first hour of a discovery call.

1. Coverage map

List every camera and what it sees. Half the audits we run identify cameras the client did not realise were there or did not realise were broken. Start with a coverage map.

2. Bar and lounge coverage

Drink spiking is the single most concentrated risk in hotel hospitality. Coverage should give clear sight of the bar surface and the area where unattended drinks sit. If the angle does not let an AI behaviour detection layer see hands and glasses clearly, the angle needs fixing.

3. Lobby and check-in

Tailgating, unattended items and pre-incident loitering all happen here. Coverage should include the front desk approach, the lifts, and any controlled-access doors leading to guest floors.

4. Corridor and lift coverage

Guest floor corridors are the privacy edge of hotel CCTV. UK GDPR allows coverage of corridors where the lawful basis is legitimate interest (guest and staff safety) and the coverage is proportionate. Coverage of guest room doors should be limited and signage clear.

5. Service corridor and back of house

Often the most under-covered area in mid-luxury and chain hotels. Service corridors are where lone workers operate, where deliveries happen, and where the highest concentration of staff incidents occurs.

6. Conference and event spaces

Enhanced Tier event spaces need active monitoring. Crowd density, unattended items, and unauthorised access are all in scope.

7. Pool and spa

Liability hotspot. Slip detection, fall detection, and prolonged-inactivity detection are direct safety measures that also reduce insurance exposure.

Free Download

Get the Martyn's Law Compliance Checklist

A step-by-step checklist covering everything your venue needs before April 2027. Free. No signup required beyond your email.

8. Car park and approach

For Enhanced Tier venues, monitoring of the immediate vicinity includes the car park and pedestrian approach. Hostile vehicle mitigation considerations apply.

9. Recording retention

Most UK hotels retain 30 days. Some retain longer for compliance reasons. The right answer depends on your insurance and licensing obligations. Document what you retain and why.

10. Storage location and data residency

If your CCTV is cloud-stored, find out where. UK-hosted is the cleanest position under UK GDPR. Cross-border transfers need a documented lawful basis.

11. Who watches the screens, and when

The honest answer in most hotels is nobody, most of the time. That is the gap AI behaviour detection closes. The audit should make the gap explicit so you can decide how to close it.

12. Evidence trail

If an incident happens today, how quickly can you produce the footage, the time, the camera location, and the operator response? If the answer is more than an hour, the evidence trail needs fixing before April 2027.

13. Signage and privacy notices

UK GDPR requires clear signage where CCTV operates. Audit your signage against the ICO code of practice. Most hotels are partly compliant. Few are fully compliant.

14. Active monitoring layer

The biggest single item on the checklist. The system that watches every frame on every camera in real time. AI behaviour detection. The active measures expectation under Martyn's Law and the cleanest answer to the insurance renewal question about what is different this year.

The shortcut

If you want to skip the spreadsheet and just see what AI behaviour detection looks like on your specific hotel, book a discovery call. We walk through the camera layout and tell you straight where the gaps are.

See Archangel AI in action

Book a personalised demo and discover how intelligent protection works for your venues.

Free consultation. Works with any CCTV system. Live in under 48 hours.