Write down the business reason first
“For security” is too vague to guide a real system. Define the problem: after-hours entry at a rear door, shipping disputes at receiving, theft near a display, vandalism in a garage, or cash-handling incidents at a till. A clear purpose helps decide whether a camera is necessary and what it should actually see.
The Office of the Privacy Commissioner of Canada advises private-sector organizations to consider less privacy-invasive alternatives, establish the reason for surveillance, and use the system only for that reason. The business—not the installer—owns that decision.
Keep the frame tighter than the lens allows
A wide lens may capture a useful doorway along with a neighbouring storefront, public sidewalk, staff break area, and computer screens. During commissioning, review each live view and trim the angle or apply supported privacy masking where unnecessary areas appear.
Avoid washrooms, changing areas, treatment rooms, or other locations where people have a heightened expectation of privacy. Audio raises separate concerns because a camera microphone may capture private conversations; leave it disabled unless the organization has confirmed a lawful, necessary reason and received appropriate advice.
Signage and access rules are part of the installation
Notice should be visible before a person enters the monitored area and should identify who operates the system and how questions can be directed. A generic camera icon alone may not answer those questions.
Recorder and app access should be limited to named roles. Use individual accounts where the platform supports them, remove access when responsibilities change, protect remote access with strong authentication, and keep a record of footage disclosed outside the organization.
Choose retention from the incident window
More storage is not automatically better. Think about how long it normally takes the business to discover a missing delivery, inventory discrepancy, property-damage claim, or customer complaint. Set a routine overwrite period that meets that purpose, then preserve only the relevant clip when an incident occurs.
The policy should cover routine deletion, incident holds, export, disclosure, and secure disposal. Revisit the system periodically: if a view is no longer necessary, or a new layout captures more than intended, change it.
Official guidance used
These sources support the general planning information. Privacy, legal, and technical requirements still depend on the property, organization, equipment, and intended use.