CCTV CCTV Security Standards and Compliance 1 — Questions and Answers
Question 1: Which US federal law most directly governs the use of video surveillance in the workplace?
- The Electronic Communications Privacy Act (ECPA) (Correct answer)
- The Fourth Amendment to the US Constitution only
- OSHA General Duty Clause exclusively
- The Health Insurance Portability and Accountability Act (HIPAA)
Correct answer: The Electronic Communications Privacy Act (ECPA)
The Electronic Communications Privacy Act (ECPA) governs the interception of electronic communications including video surveillance, alongside state-specific privacy laws.
Question 2: What does the acronym 'NDAA' compliance refer to in the US CCTV industry?
- Restrictions on using CCTV cameras from certain Chinese manufacturers in US government facilities (Correct answer)
- National standards for data encryption in IP video systems
- Federal certification requirements for security integrators
- New Digital Acquisition Act governing cloud-based video storage
Correct answer: Restrictions on using CCTV cameras from certain Chinese manufacturers in US government facilities
The National Defense Authorization Act (NDAA) Section 889 prohibits US federal agencies from procuring equipment from specific Chinese manufacturers (including Hikvision, Dahua, Huawei) due to national security concerns.
Question 3: Which industry standard body publishes the Physical Security Professional (PSP) certification relevant to CCTV practitioners?
- ASIS International (Correct answer)
- National Electrical Contractors Association (NECA)
- Society of Cable Telecommunications Engineers (SCTE)
- American National Standards Institute (ANSI) directly
Correct answer: ASIS International
ASIS International offers the Physical Security Professional (PSP) certification, which covers electronic security systems including CCTV and is widely recognized in the US security industry.
Question 4: What does PCI DSS require regarding CCTV in environments handling payment card data?
- All card processing areas must have active CCTV monitoring with 90-day retention
- No CCTV cameras may be positioned to capture card numbers or PIN entry (Correct answer)
- All CCTV systems must be certified by the PCI Security Standards Council
- Cameras are optional if compensating controls are in place
Correct answer: No CCTV cameras may be positioned to capture card numbers or PIN entry
PCI DSS requires that CCTV cameras must not be positioned where they can capture cardholder data such as card numbers or PIN entry on keypads.
Question 5: In the US, which constitutional amendment most directly limits government use of CCTV surveillance without a warrant?
- First Amendment (free speech)
- Fourth Amendment (unreasonable search and seizure) (Correct answer)
- Fifth Amendment (self-incrimination)
- Fourteenth Amendment (due process)
Correct answer: Fourth Amendment (unreasonable search and seizure)
The Fourth Amendment protects individuals from unreasonable government searches and seizures, which courts have applied to limit warrantless mass surveillance in spaces where there is a reasonable expectation of privacy.
Question 6: What does HIPAA compliance require when CCTV cameras are installed in US healthcare facilities?
- All footage must be encrypted using AES-256 at rest and in transit
- Camera placement must avoid capturing protected health information (PHI) such as patient records or treatment areas (Correct answer)
- Healthcare facilities are exempt from CCTV regulations under federal law
- All camera operators must hold a HIPAA-certified security clearance
Correct answer: Camera placement must avoid capturing protected health information (PHI) such as patient records or treatment areas
HIPAA requires healthcare facilities to protect patient privacy, meaning cameras must be positioned to avoid capturing protected health information including medical records, treatment procedures, or conversations.
CCTV CCTV Security Standards and Compliance 1
Which US federal law most directly governs the use of video surveillance in the workplace?