The ICO exists to empower you through information.

17 May 2024

Overall rating

Your overall rating was green.

  • 0: Not yet implemented or planned
  • 1: Partially implemented or planned
  • 8: Successfully implemented
  • 0: Not applicable

AMBER: partially implemented or planned

Your business trains its staff in how to operate the CCTV system and cameras (if applicable) and how to recognise requests for CCTV information/images.

 

Suggested actions

Where measures have only been partially implemented, please select the appropriate actions from the detail below:

  • Ensure that all staff who are authorised to access the cameras are familiar with the system, and how to review and extract footage if required;
  • Ensure that all staff are familiar with the likely disciplinary penalties for misuse of the CCTV systems; and
  • Ensure you meet and record training standards (such as SIA qualifications) when a staff member’s role explicitly includes monitoring of CCTV, eg a security guard.

Guidance

Surveillance Camera Commissioner website

Surveillance Camera Code of Practice, GOV.uk website

Surveillance Camera Code of Practice – Self Assessment Tools, GOV.uk website

Guide to the UK GDPR – Right of access, ICO website

 

GREEN: successfully implemented

Your business has identified and documented the potential impact on individuals’ privacy and taken this into account when installing and operating the CCTV system. You regularly review whether CCTV is still the best security solution.

Your business has paid the data protection fee to the Information Commissioner's Office (ICO).

Your business has a policy and/or procedure covering the use of CCTV and has nominated an individual who is responsible for the operation of the CCTV system.

Your business has established a process to recognise and respond to individuals or organisations making requests for copies of the images on your CCTV footage and to seek prompt advice from the Information Commissioner where there is uncertainty.

Your business only retains recorded CCTV images for long enough to allow for any incident to come to light (eg for a theft to be noticed) and to investigate it.

Your business has ensured that the CCTV images are clear and of a high quality.

Your business securely stores CCTV images, limits access to authorised individuals and regularly checks that the CCTV system is working properly.

Your business clearly informs individuals of your use of CCTV.

 

 



Bespoke tools have been developed by the Surveillance Camera Commissioner
to help organisations prove their surveillance camera systems comply with the code of practice. This code applies to relevant public authorities in England and Wales, but others can adopt it voluntarily. Although, the Information Commissioner and the Surveillance Camera Commissioner have separate roles and powers, they liaise to make sure guidance and tools are consistent.

Thank you for completing this checklist. Please complete our short feedback survey to help improve our toolkit.

The survey should take around three minutes to complete.