Legal and Ethical Principles Flashcards

When a CCTV operator discovers that the system has been hacked and footage is being accessed remotely by an unauthorized party, the first step should be:

Answer: Immediately disconnect the system and notify management and IT security

Immediately isolating the compromised system and notifying appropriate personnel is the correct first step to contain a cybersecurity breach of CCTV infrastructure.

Under HIPAA, healthcare facilities that use CCTV must ensure that:

Answer: Footage capturing patient medical information is handled with appropriate safeguards

HIPAA requires that any footage capturing Protected Health Information (PHI), such as patients receiving treatment, must be handled with appropriate security safeguards.

A CCTV operator is asked by a private investigator (PI) to share footage of a specific individual. Without a subpoena or court order, the operator should:

Answer: Decline to share footage and direct the PI to obtain proper legal authorization

Without a subpoena, court order, or other valid legal process, releasing footage to a private investigator violates privacy obligations and potentially creates legal liability.

The legal doctrine of 'negligent security' can arise in CCTV contexts when:

Answer: A business fails to monitor or act on footage showing a foreseeable threat, resulting in harm

Negligent security liability can arise when a business had surveillance capability, observed or should have observed a threat, but failed to take reasonable action to prevent harm.

Which of the following is the most appropriate way to handle a request from a media outlet for CCTV footage of a newsworthy incident?

Answer: Refer the media to the organization's legal counsel or designated spokesperson

Media requests for surveillance footage should be handled through proper legal and communications channels to ensure legal compliance and protect organizational interests.

A CCTV system installed in a school must comply with which law that protects students' educational records and personally identifiable information?

Answer: FERPA (Family Educational Rights and Privacy Act)

FERPA protects the privacy of student education records, and schools must consider FERPA compliance when footage captures identifiable students in educational settings.

When writing a CCTV usage policy, which element is most critical for establishing operator accountability?

Answer: Defining clear, documented procedures for authorized access and use of footage

Clear, documented access and usage procedures establish accountability by defining who can access footage, under what conditions, and for what purposes.