Information Commissioner's Office
ICO warns CCTV operators that use of surveillance cameras must be necessary and proportionate
The Information Commissioner’s Office (ICO) has warned operators that surveillance cameras must only be used as a necessary and proportionate response to a real and pressing problem.
The warning comes on the day the ICO published its updated CCTV code of practice (pdf). The update includes a look at the data protection requirements placed on operators of new and emerging surveillance technologies, including drones and body worn video cameras.
ICO Head of Strategic Liaison, Jonathan Bamford, said:
“The UK is one of the leading users of CCTV and other surveillance technologies in the world. The technology on the market today is able to pick out even more people to be recorded in ever greater detail. In some cases, that detail can then be compared with other databases, for instance when automatic number plate recognition is used. This brings new opportunities to tackle problems such as crime, but also potential threats to privacy if they are just being used to record innocent members of the public without good reason.
“Surveillance cameras should not be deployed as a quick fix, but a proportionate response to a real and pressing problem. Putting in surveillance cameras or technology like automatic number plate recognition and body worn video is often seen as the first option, but before deploying it you need to understand the problem and whether that is an effective and proportionate solution. Failure to do proper privacy impact assessments in advance has been a common theme in our enforcement cases.”
The updated code explains how CCTV and other forms of camera surveillance can be used to process people’s information. The guidance explains the issues that operators should consider before installing such surveillance technology, the measures that organisations should have in place to make sure excessive amounts of personal information aren’t being collected and the steps organisations should have to make sure the information is kept secure and destroyed once it is no longer required.
The ICO’s CCTV Code of Practice complements the provisions in the Surveillance Camera Code of Practice, which applies to police forces, local authorities and police and crime commissioners in England and Wales, as described in the Protection of Freedoms Act. The ICO’s guidance covers a wider area, as the requirements of the Data Protection Act apply to all sectors processing personal information across the whole of the UK, including the private sector. The Data Protection Act does not apply to people using CCTV for their domestic use.
Recent enforcement action taken by the ICO to stop the excessive use of CCTV includes an enforcement notice served on Southampton City Council after the council required the video and audio recording of the city’s taxi passengers 24 hours a day. The ICO also served an enforcement notice on Hertfordshire Constabulary after the force began using Automatic Number Plate Recognition (ANPR) cameras to record every car entering and leaving the small rural town of Royston in Hertfordshire. In both cases the excessive use of surveillance cameras was reduced following the ICO’s action.
Notes to Editors
1. The Information Commissioner’s Office upholds information rights in the public interest, promoting openness by public bodies and data privacy for individuals.
2. The ICO has specific responsibilities set out in the Data Protection Act 1998, the Freedom of Information Act 2000, Environmental Information Regulations 2004 and Privacy and Electronic Communications Regulations 2003.
Latest News from
Information Commissioner's Office
Firm fined £350,000 for making record 146 million nuisance calls18/09/2017 10:25:00
A company behind a record high 146 million illegal calls about PPI has been fined £350,000 by the Information Commissioner’s Office (ICO).
CBI Cyber Security Conference13/09/2017 14:20:00
Elizabeth Denham talked about how cyber security and data protection are inextricably linked in her speech at the CBI Cyber Security Conference on 13 September 2017.
Taxi booking app firm is fined for breaching the law on spam texts13/09/2017 10:10:10
The company behind a taxi booking app has been fined £45,000 by the Information Commissioner's Office (ICO) for breaking the law on sending unsolicited text messages.
Calling people registered with the TPS costs telephone services company £85,00012/09/2017 09:10:00
The Information Commissioner’s Office (ICO) has fined a Dartford-based telephone services company £85,000 for making illegal nuisance calls.