If your business uses CCTV you must tell people they may be recorded. This can be done by using signs in and around the workplace.
You must also notify the Information Commissioners Office (ICO) and advise why you are using the CCTV
You will need to control who can see the recordings and make sure the system is only used for the purpose it was intended.
If the system was set up for detecting crime you should not use it to monitor work done by staff.
Anyone can ask to see images that you have recorded of them. You must provide these within 40 days and can charge up to £10.
Further information about the use of CCTV can be found on the ICO website.
The ICO CCTV code of practice covers everything you may need to know on the subject but it is comprehensive and may go too far for your purposes so in the first instance we would suggest that you focus on Appendix 2 – Checklist for users of limited CCTV systems monitoring small retail and business premises to the Code, which may be rather more on point for your requirements.
On average 55 vulnerabilities are identified daily.
What can I do?
Review your organisations priorities and ask ‘can we afford a breach?’. What do I do during an incident? Who do I involve? When do I involve the ICO?
If you’re unable to answers these questions, you need help from the experts.
