Since 25 May 2018 no prior CNPD authorisation is required to install cameras. What the GDPR does require: a record of processing activities, signage at every filmed entrance (CNPD model available), cameras framed so they capture neither the public road nor the neighbours (privacy masking), no audio recording, and limited retention — 8 days as a rule, 30 days maximum where justified. On business premises, Art. L.261-1 of the Labour Code also applies (informing staff and the staff delegation). Every installation is handed over with its compliance kit: sign, template record, retention period configured.
Technically we use Hikvision, Dahua and Ubiquiti UniFi Protect — 4K, 30 m IR, IK10 anti-vandal, recording on local NVR or encrypted cloud. PoE power so each camera needs a single cable. The cameras run over the same network cabling as your RJ45 outlets: one rack, one point of contact.