GDPR

CCTV & GDPR

With the implementation of the original Data Protection Act in 1998 and its subsequent update to the General Data Protection Regulation (GDPR) in May 2018, anyone with or considering the installation of CCTV must comply with the 12 guiding principles in the Surveillance Camera Code of Practice.

Here are some steps to help you move towards compliance with each of the principles.

1. 1

   What's your system for?

   Do you review its use?

2. 2

   Have you carried out a privacy impact assessment?

   Do you publish your privacy impact assessment?

3. 3

   Do you have signage in place to say surveillance is taking place?

   Is there a published point of contact for people to raise queries or complaints with?

4. 4

   Who's responsible for your system?

   Are your staff aware of their responsibilities?

5. 5

   Do you have clear policies and procedures in place?

   Do your staff know what your policies and procedures are?

6. 6

   How long do you keep images/information?

   How do you make sure images/information is deleted once they're no longer needed?

7. 7

   Do you have a policy on who has access to the stored information?

   Do you have a policy on disclosure of information?

8. 8

   Do you follow any recognised operational or technical standards?

9. 9

   Do you make sure that the images captured by your system are caught securely?

   Are only authorised people given access to the images?

10. 10

    Do you evaluate your system regularly to make sure it's still required?

    Could there be an alternative solution to a surveillance camera system?

11. 11

    Can the criminal justice system use the images and information produced by your surveillance camera system?

    Do you have a policy on data storage, security and deletion?

12. 12

    Do you use any specialist technology such as ANPR, facial recognition, Body Worn Video (BWV) or remotely operated vehicles (Drones)?

    Do you have a policy in place to ensure that the information contained on your database is accurate and up to date?