Cameras and premises.
WHAT IT PROCESSES
Images of identifiable people.
WHY THAT MATTERS
It is personal data, and the rules apply.
WHAT TO ESTABLISH FIRST
Why you are recording.
WHAT GOOD REASONS LOOK LIKE
Security of premises Prevention of specific, identified problems
WHAT POOR REASONS LOOK LIKE
Monitoring staff productivity Because everyone does
WHAT TO ASSESS
Whether the purpose justifies the intrusion.
WHAT TO CONSIDER
Less intrusive alternatives Whether coverage can be narrower
WHAT TO AVOID COVERING
Areas where people expect privacy Neighbouring property More of the public way than necessary
WHAT SIGNAGE MUST DO
Inform people that recording occurs, who operates it, and how to contact them.
WHERE
Visible before entering the area.
WHAT RETENTION TO SET
As short as the purpose allows.
WHY
Recordings accumulate enormously.
WHAT ACCESS TO RESTRICT
Who may view recordings, and under what circumstances.
WHAT TO LOG
Every viewing and every extraction.
WHAT TO DO ABOUT ACCESS REQUESTS
People may request footage of themselves.
WHAT THAT REQUIRES
Locating it, and obscuring other people.
WHY THAT IS DIFFICULT
It is laborious, which is why retention should be short.
WHAT TO DOCUMENT
The purpose, the assessment, and the retention.
