What CCTV operator must "DO" to comply with DPA 1998 for CCTV?
Please, make sure you follow this few steps:
Purpose of CCTV system
What is the reason for you to use Surveillance system? Is it Crime prevention, Health & Safety or is it Good property management?
Registration with ICO
Register your Company with ICO and let them know, what is the purpose of your CCTV system. Registration with ICO require annual payment of £35. If you are already register with ICO for another purpose, you must tell them that you are using CCTV system to collect personal Data. No extra payment will be required in this case.
Public must be aware of entering and area covered by CCTV. The best way to deliver that message is by using Signs. Signs, which are clearly visible and legible, should be displayed at least at every Entrance in eye level.
How long should you retain the footage for?
Images recorded by your CCTV system should be only retain for period necessary to achieve the purpose of the CCTV system. Usually advisable period is up to 30 days.
Have you got dedicated person do deal with Subject Access requests and to make decisions? Who is responsible for faulty or non-working cameras?
Keep your equipment in restricted area.
Make sure the Recording device is located in restricted area, ideally in lockable cabinet, such as DVR/NVR Enclosure or Data cabinet.
Eight principles of the Data Protection Act.
Anyone who processes personal information must comply with eight principles of the Data Protection Act, which make sure that personal information is:
Fairly and lawfully processed
Processed for limited purposes
Adequate, relevant and not excessive
Accurate and up to date
Not kept for longer than is necessary
Processed in line with your rights
Not transferred to other countries without adequate protection
Tel: 01494 572 110
Greater London House
London NW1 7QX