How do we operate these systems and ensure the information recorded is secure?

Our CCTV and surveillance camera systems are operated in line with data protection legislation, our Data Protection Policy, and only for the purpose(s) we have identified. As such, we put in place clear operating procedures for each system, which are understood by all operators and monitored by a named accountable officer. This includes:

• Creating procedures for accessing our recordings and sharing information,
• Documenting the names of staff who have had access to any recorded information,
• Restricting access to surveillance camera footage on a need-to-know basis,
• Documenting procedures for keeping this information secure, how long it is kept for, and how it is destroyed at the end of its lifecycle,
• Securing the location of our monitoring equipment and footage (by ensuring everything is stored away in a lockable office),
• Ensuring our systems are regularly maintained to ensure they are in good working order,
• Having a compliant contract with third parties that operate and maintain our systems on behalf of the council,
• Providing appropriate training to our staff.