A CCTV policy for a business using CCTV cameras is crucial. Without one, your business is not abiding to the GDPR legislations. This means that your business is breaking the law by using CCTV cameras with a CCTV policy. In this blog post we look at the importance of a CCTV policy and why your business needs one.
It is important to note that if you have CCTV cameras securing your business, but you do not have a CCTV policy, then any CCTV footage cannot be used as evidence. It also cannot be used for any legal reasons. If it is found that a CCTV policy was not in place when the footage was captured on the CCTV cameras within your business.
Our business security experts are often asked if they need a CCTV policy. The simple answer to this question is yes.
You must have a CCTV policy in place to comply with GDPR and the law. This is because all surveillance carried outside of someone’s private property falls under the GDPR act. This has been the case since it was set up in 2018. The rules within the GDPR act are in place to ensure that your CCTV systems meet all legal regulations.
Below we have listed some of the rules that a business must follow in order to use CCTV surveillance cameras. These will show you the importance of a CCTV policy, why your business needs one and what to include in it.
- As an employer, you must register as a data controlled. This is done by contacting The Information Commissioners, also known as the ICO. When contacting the ICO you need to outline the purpose of using CCTV surveillance cameras at your business. You must also confirm that you are aware the footage collected cannot legally be used for any other purposes.
- It is essential that all employees are notified of the CCTV cameras and told that they are being recorded. This can be done through the presentation of clear signs throughout the building and the entrance. This will mean that as anyone enters the building, they will be aware that they are being monitored.
- CCTV cameras must not be installed in any areas of the business where complete privacy is expected. This includes places like the toilets or any changing rooms for example.
- If an individual has been recorded on your CCTV cameras within the business, they can request a copy of the footage. This must be provided to them within one month.
While we have spoken about the importance of a CCTV policy and why your business needs one, there is one more thing that you need to be aware of. If you were to ignore CCTV data protection laws, you could be fined up to £500,000. This is the monetary penalty on a data controller that the ICO has the power to impose.
If you are considering CCTV surveillance cameras in your business, call our CCTV surveillance team. We can talk you through the importance of a CCTV policy and why your business needs one.