Subject access request self serve
-
1. What is your question about?
Third party information (information about other individuals)
-
2. What is your question?
Should I share CCTV footage or audio recordings when more than one person can be seen or heard?
The following information might help answer your question
People who submit requests for footage that contains their personal information have a right to receive that information under data protection legislation. When installing CCTV, you should make sure you choose a system that allows you to easily locate and extract personal information in response to subject access requests. You should also ensure it allows for the redaction of third-party information, where this is necessary. If your CCTV system has this functionality, it will likely enable you to comply with your data protection obligations.
However, if your CCTV system does not have this functionality, you still need endeavour to comply with your obligations. However, you should only disclose the footage if you have the other people’s consent to do so, or if it’s reasonable to do so without their consent.
To help you decide whether to disclose information relating to a third party, follow the three-step process and make sure you consider all the other factors set out in the guidance.
Find out more here: