CCTV Checklist
CCTV footage of identifiable people is personal data. Use this checklist to keep your cameras fair and lawful.
Purpose and necessity
- [ ] You have a clear, legitimate reason for each camera (for example security).
- [ ] Cameras are not in private areas such as bathrooms or changing rooms.
- [ ] You record only what you need for the purpose.
Transparency
- [ ] Clear signage tells people they are being recorded and who operates the cameras.
- [ ] Your privacy notice mentions CCTV and how to ask about footage.
Storage and retention
- [ ] Footage is stored securely with limited access.
- [ ] There is a set retention period, after which footage is deleted.
- [ ] You do not keep footage longer than necessary.
Access and requests
- [ ] Only authorised people can view footage, and access is logged where possible.
- [ ] You have a process to handle a request from someone for footage of themselves.
- [ ] Sharing footage with police or others is done with a proper basis.
Review
- [ ] Camera positions and retention are reviewed periodically.
- [ ] Monitoring of staff, if any, is proportionate and disclosed.
Legal note. This is a general checklist, not legal advice. Adapt it to your premises and confirm specifics against the Act.
