Navigating Data Protection Laws in CCTV Footage Management

Understanding Data Protection Laws

Data protection laws are crucial when managing CCTV footage. They ensure that personal data is handled with care. In the UK, the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 govern how businesses use CCTV.

These laws apply to all businesses that use CCTV systems. They protect the rights of individuals whose images are captured. It's important to understand these laws to avoid legal issues.

Key Principles of Data Protection about the use of CCTV.

• Purpose limitation: Use CCTV footage only for specific purposes.
• Data minimisation: Collect only the necessary data.
• Request Procedure: Ensure personal data is not disclosed without a lawful reason.
• CCTV Policy: Ensuring people know they are being recorded, tell them how they can obtain a copy of their personal data, record your lawful reason for using CCTV and detail who you are.

There are several principles organisations need to follow to be compliant, however, by following these key principles, businesses can ensure they are complying with the basic requirements. The more complex the CCTV system, the greater the amount of data collected and the greater the expectations of the regulators.

Implementing CCTV Policies

Having a clear CCTV policy is essential. This policy should outline the purpose of the CCTV system. Why did you instal CCTV, what is the aim of the system and why you didn't choose other solutions. It should also detail how footage is stored, who has access to it and what the procedure is for dealing with requests for footage.

Regularly reviewing and updating this policy is important. This ensures that it remains compliant with current laws. Awareness and training for staff on these policies is also crucial. 

Protecting individual's rights is important for building trust. 

Most of us don't like being recorded and we feel concerned if someone pulls out a phone and starts recording us. The same can be said for CCTV. Whilst many people understand the need for CCTV and the safety it can provide, there is a balance to be struck. Employees are more likely to leave their employment if they feel the CCTV images being collected is being misused.

By explaining why you have CCTV and the purpose for installing it, employees have an opportunity to share their concerns. They may also provide valuable advice for tailoring the system to meet your objectives. If the purpose of a CCTV camera is to prevent theft, your employees might suggest blindspots where cameras should be positioned.

Storing and Securing Footage

Proper storage and security of CCTV footage are essential. Footage should be stored securely to prevent unauthorised access and misuse. You may remember the case of Emiliano Sala, who tragically died and his body was taken to Bournemouth crematorium. Daly employees for a security company viewed CCTV footage of his post mortem and took photographs of the body. Good security for your CCTV system can include using password protection and encryption of the hard drive.

It's also important to have a clear retention policy. This policy should state how long footage will be kept. Many systems are set to automatically overwrite older images every 30 days or every 60 days. Once the CCTV footage is no longer needed, it should be securely deleted or over written.

Regular Audits and Compliance Checks 

It's a good idea to check your CCTV system is working correctly. Are the cameras working, are the cameras in the best location, can you access the images, has any part of the system broken etc. If you are relying on the CCTV images to claim on your insurance or to protect yourself or employees, you want the peace of mind you can use the footage when it is needed. 

Storms and high winds can damage exterior cameras or change the field of vision. Internal cameras could be obsecured by items blocking the field of vision. Poorly installed cameras may only capture footage of hats or be affected by poor lighting, for example.

Conclusion

Navigating data protection laws in CCTV footage management is essential for many businesses. By understanding and following these laws, businesses can protect individuals' rights, avoid legal issues and support insurance claims.

Implementing a clear policy, handling access requests properly, and securing footage are key steps. Regular audits and staff training also play an important role too.

If you need help or assistance, why not contact us at GDPR Compliance Centre, to discuss the compliance packages we have available.