CCTV for hospitals and clinics: what installers must plan for

Healthcare sites operate around the clock and combine public access with deeply private care. Hospitals want to protect staff from violence, keep drugs and equipment safe and manage large numbers of visitors. They also have to protect patient dignity and confidentiality. A camera that is helpful in one room can be unacceptable in the next.

Whether you work on a small clinic or a large hospital, the job demands more care than an ordinary commercial project. Healthcare privacy rules differ by country and setting, so the provider's compliance team or legal adviser should sign off on the plan. What follows is general practice, not legal advice.

Talk to the right people

Larger hospitals have many stakeholders, and it's worth finding them early.

• Security manager: owns day-to-day use of the system
• Facilities or biomedical engineering: knows the building and clinical equipment
• IT department: controls networks and cyber security rules
• Infection control team: sets rules for working near patients
• Compliance, legal or privacy officer: advises on placement and footage handling
• Clinical leads: know how each department really works
• Administration or procurement: handles the contract

A small clinic may have just one or two decision-makers, but the same questions still apply.

Why healthcare customers want cameras

Understanding the purpose helps you design correctly and keep coverage focused.

• Violence or threats against staff, particularly in emergency departments
• Theft of drugs, equipment and personal belongings
• Unauthorised access to restricted areas
• Parking and vehicle incidents
• Investigating incidents and complaints
• Safety of vulnerable patients who may wander
• Protection of infants in maternity units

The last two usually need more than CCTV, such as access control, tagging and staff procedures. Be clear that cameras form only one part of the solution.

Where cameras typically help

Entrances and reception

Cover all entry points, particularly after hours. Reception is often where tension builds, so a clear view can help in a dispute. Choose a position that avoids viewing patient records or screens.

Emergency department public areas

Staff may face aggression here. Good views of entrances, waiting areas and the ambulance bay support staff safety and incident review. Keep cameras away from treatment areas unless the provider has specifically decided otherwise with appropriate advice.

Corridors and stairways

These pinch points allow people's movements to be followed through the building without viewing care areas. Be careful that views don't reach into wards or rooms when doors open.

Pharmacy and drug stores

Secure stores justify detailed coverage, with cameras placed to see who's entering and how drugs are handled. Avoid capturing keypad codes. The pharmacist in charge may have requirements of their own, and regulators may have rules for controlled drugs.

Medical records and IT rooms

Cover entrances and restricted rooms, taking care that screens and documents are not readable on camera.

Cash counters and billing

Follow the same approach as retail tills. Avoid capturing PIN entry or patient information on screens.

Ambulance bays, loading docks and perimeter

These are lower-risk areas from a privacy perspective, but patients could still be visible during transfers. Consider what's in view at the ambulance bay.

Parking

Staff working night shifts may feel vulnerable in car parks. Good coverage and lighting here are often appreciated.

Where cameras need special care

Do not install in the following without an explicit decision and proper advice from the provider's privacy and clinical teams:

• consultation and examination rooms
• operating theatres and procedure rooms
• patient rooms and wards
• intensive care units
• toilets and bathrooms, which should always be excluded
• changing rooms and staff rest areas
• mental health and counselling spaces
• maternity and paediatric care areas

Some of these settings may have specific requirements for monitoring. Those are clinical decisions, not installation decisions. Medical video monitoring, for instance, may involve different systems, consent processes and rules from security CCTV. Don't assume they are the same thing.

Avoid accidental capture

Even a well-placed camera can capture too much.

• Doors opening onto examination rooms
• Whiteboards with patient names
• Computer screens and records in reception
• Patients on trolleys in corridors
• Reflections in glass

Check each view after installation, during a normal working period if you can, and apply privacy masks. Then review after any department layout changes.

Audio and video

Disable audio unless the provider has specifically decided otherwise after taking advice. Conversations in healthcare settings may include confidential medical information, so recording them is a serious issue.

Handling footage

The provider should set the policy, but you can help make it workable.

• Assign named users with least-privilege access.
• Limit export rights to a very small number of people.
• Keep live monitoring screens away from public view.
• Keep access logs, where supported.
• Set a retention period agreed with the compliance team.
• Encrypt any exported footage where possible.
• Never keep recordings on your own devices during service visits.
• Have your staff sign a confidentiality agreement.

Your technicians may see sensitive images during configuration or maintenance. Tell them not to discuss what they see or take any photos of screens. Have a clear process, and make sure it's enforced.

Working in a live hospital

This is where healthcare projects differ most from others. The building doesn't close, and your work can affect patient care.

Infection control

Drilling and opening ceilings can release dust, which may contain fungal spores that are dangerous to vulnerable patients. Hospitals may require infection control assessments, dust barriers, negative pressure and special cleaning before you do this kind of work, especially near critical care or immunocompromised patients. Find out the rules in advance, and include their cost and time in your quote.

Noise and timing

Coordinate noisy work with the department. Certain wards may allow work only at particular times. Sites like theatres and imaging departments may have strict schedules.

Clinical equipment

Stay clear of medical gases, bedhead services and clinical equipment. MRI rooms are especially dangerous: strong magnetic fields can turn tools and ferrous objects into projectiles. Never enter these areas without authorisation and a safety briefing.

Electromagnetic compatibility should be considered too. Discuss any new equipment near sensitive areas with biomedical engineering.

Staff conduct

• Follow sign-in and identification rules.
• Wash hands, and follow any uniform or protective equipment guidance.
• Be respectful around patients and families.
• Never enter a room without permission.
• Keep tools secure, and don't block corridors, fire doors or emergency routes.
• Keep ladders and equipment out of evacuation routes.

Technical considerations

• Availability: Hospitals run 24 hours. Consider redundant recording and power, and try to avoid single points of failure.
• Network: Hospital IT will have firm rules. Keep cameras on a separate VLAN or network, and don't connect to clinical systems. See our cyber security guide.
• Cleanable equipment: Smooth, sealed housings are easier to keep clean, and they may be required in certain areas.
• Discreet design: Small dome cameras tend to be more acceptable in patient-facing areas.
• Fire safety: Cable penetrations through fire compartments must be sealed according to local requirements, and cable types may be specified. Hospitals are carefully compartmented, as patients can't always evacuate quickly.
• Lighting: Wards dim lights at night, so low-light performance matters in corridors.
• Integration: Access control, panic buttons and nurse call systems may be linked, but these require careful coordination. Don't connect to life-safety systems without proper approval.

Small clinics

A small clinic's budget and setup are much simpler, but the privacy principles are the same. A typical small clinic might need cameras at the entrance, reception and billing, pharmacy or medicine store, and the corridor. Consultation rooms should generally stay off the plan. Show the doctor or owner exactly what each camera sees, and ask them to sign off on the views. See our camera placement guide for how to choose each position.

Tendering and references

Larger healthcare providers usually buy through formal processes. Prepare a compliance matrix, include references and show your approach to privacy, infection control and working in live areas. Our tender guide explains how to prepare. Experience in a similar environment carries a lot of weight, so consider starting with clinics and smaller hospitals, and working up.

Maintenance and service

Plan service visits as carefully as the installation. Follow the same access rules and agree on response times that account for infection control and visitor rules. Define what happens for a critical failure, such as loss of recording. A maintenance contract is common for sites like these, and should reflect the access restrictions.

Checklist before you start

• Privacy and compliance team has reviewed the camera list
• Each view has a stated purpose
• Sensitive areas have been excluded or specifically approved
• Audio has been disabled on all cameras
• Infection control requirements have been agreed
• Work schedule has been agreed with each department
• IT has approved the network design
• Fire-stopping and cable requirements are confirmed
• Staff have been briefed and have signed confidentiality agreements
• Footage access and retention are agreed in writing

Careful preparation is what makes healthcare work possible. Customers in this sector notice whether you understand their environment, and those who do tend to get invited back.