Closed Circuit Television is recognised as being one of the
most useful crime reduction and detection resources available. The
following pages provide information and guidance on the benefits of
installing CCTV both commercially and domestically.
The Data Protection Act 1998 lays down clear requirements for
the collection, use, storage and management of CCTV
recordings.
Here are 12 points to remember for CCTV systems which monitor
areas to which members of the public have access.
1. A 'Data Controller' must be appointed in every organisation,
to monitor files and deal with applications from employees and
third parties to access records. They then determine the purpose
for processing personal information.
This is normally for the prevention and detection of crime and
public safety within areas to which the public have access.
2. Notify the Office of the Data Protection Commissioner that
you are processing personal data.
There must be a legitimate basis for installing CCTV cameras
(Crime Prevention & Detection).
3. Use appropriate signage to notify individuals that CCTV is
in operation.
This must notify individuals that CCTV is being used, the
purpose of the system, who the owner is and their contact
details.
4. Authorised disclosees and compatibility of disclosure.
You must state recipients of information. If you wish to
disclose information it must be for a compatible purpose (Police
Service or Security Company etc.).
5. Unauthorised Disclosure.
Be aware of who can see the monitors and who has access to
video images to reduce any risk of unauthorised
disclosure. Ensure video monitors are screened from view by
unauthorised persons.
6. An individual's access rights.
An individual, on payment of the appropriate fee, who is the
subject of stored data images, must be allowed access to those
images, giving satisfactory reasons for doing so and providing
suitable identification (Subject Access Requests must be dealt with
in the prescribed manner).
7. Protect third parties.
You must not disclose third party details without the consent
of the third party. This may require pixelating (obscuring or
masking) out third parties from video footage in access
requests.
8. Train your staff.
You must train your staff in Data Protection Principles and
Legislation. They must be aware of their responsibilities, i.e.
information obtained must be relevant, accurate, kept up to date,
kept secure and obtained fairly.
9. Breach of Legislation.
A breach of the legislation may be a criminal offence and it
carries with it an unlimited fine in Solemn proceedings, and is
down to personal liability. If any individual suffers damage and
distress due to a breach of the Act then they may be entitled to
compensation.
10. Information.
Information must be processed fairly and lawfully, documented
and retained no longer than is necessary. The
recommended image retention period is not less than 28 days,
no longer than 31 days. However, with the advent of digital imaging
systems, the advice is that images are not kept longer than is
necessary.
11. Security.
Video Data must be kept secure, with only authorised and
trained staff having access. Appropriate security measures must be
taken to prevent unauthorised access to video images.
12. Covert cameras.
The use of covert cameras is only lawful if the criminal
activity under surveillance can be specifically identified; routine
and general covert surveillance is not authorised.
If you require further advice on Closed Circuit Television,
please contact our Force CCTV Liaison Officer Stuart Ward, on
0845 600 5702.