CCTV footage is the personal data of the individuals in the footage. The Surveillance Camera Code of Practice gives the following as a general principle:
“Access to retained images and information should be restricted and there must be clearly defined rules on who can gain access and for what purpose such access is granted; the disclosure of images and information should only take place when it is necessary for such a purpose or for law enforcement purposes.”
Access and disclosure of CCTV images therefore needs to be consistent with the purposes for which the CCTV system was set up, usually crime prevention and/or public safety.
Requests from an individual for CCTV information about themselves
Requests from a third party organisation for CCTV footage
Requests should be made in writing by the requesting organisation, ideally using that organisation’s official Data Protection Act request form setting out:
- name and address of the data subject.
- nature of the enquiry (ie, the nature of the investigation, quoting any legislation that applies, to evidence why the requesting organisation is permitted to seek this information).
- information requested – this should be precisely described, eg, time, place
- contact details of the requester – name, job title, organisation, address, telephone number and email address
- the form should be signed by a senior official of the requesting organisation who is authorised to request such information.