This CCTV system and the images produced by it are controlled by ………………….. who is responsible for how the system is used and for notifying the Information Commissioner about the CCTV system and its purpose (which is a legal requirement of the Data Protection Act 1998)1.
We (……) have considered the need for using CCTV and have decided it is required for the prevention and detection of crime and for protecting the safety of customers. It will not be used for other purposes. We conduct an annual review of our use of CCTV.
| Checked (Date) | By | Date of next review | |
|---|---|---|---|
| Notification has been submitted to the Information Commissioner and the next renewal date recorded. | |||
| There is a named individual who is responsible for the operation of the system. | |||
| A system has been chosen which produces clear images which the law enforcement bodies (usually the police) can use to investigate crime and these can easily be taken from the system when required. | |||
| Cameras have been sited so that they provide clear images. | |||
| Cameras have been positioned to avoid capturing the images of persons not visiting the premises. | |||
| There are visible signs showing that CCTV is in operation. Where it is not obvious who is responsible for the system contact details are displayed on the sign(s). | |||
| Images from this CCTV system are securely stored, where only a limited number of authorised persons may have access to them. | |||
| The recorded images will only be retained long enough for any incident to come to light (e.g. for a theft to be noticed) and the incident to be investigated. | |||
| Except for law enforcement bodies, images will not be provided to third parties. | |||
| The organisation knows how to respond to individuals making requests for copies of their own images. If unsure the controller knows to seek advice from the Information Commissioner as soon as such a request is made. | |||
| Regular checks are carried out to ensure that the system is working properly and produces high quality images. |
Please keep this checklist in a safe place until the date of the next review.
1 Not all small businesses need to notify. Current notification requirements can be found at www.ico.gov.uk/what_we_cover/data_protection/notification.aspx