CCTV Legal and Ethical Principles 4 — Questions and Answers
Question 1: In California, the California Consumer Privacy Act (CCPA) as it relates to CCTV footage means businesses must:
- Install cameras in all customer-facing areas
- Disclose what personal data, including video footage, they collect and allow opt-out requests (Correct answer)
- Obtain explicit consent before recording anyone in a store
- Delete all footage within 48 hours of recording
Correct answer: Disclose what personal data, including video footage, they collect and allow opt-out requests
Under CCPA, businesses must disclose their data collection practices, including video surveillance, and honor consumer requests regarding their personal information.
Question 2: When CCTV footage is subpoenaed by a court, the organization must:
- Comply with the subpoena and produce the requested footage (Correct answer)
- Delete the footage to protect individuals' privacy rights
- Only provide footage if the subject of the footage consents
- Charge the court a fee for footage retrieval before complying
Correct answer: Comply with the subpoena and produce the requested footage
A valid court subpoena is a legal order that requires compliance; failing to produce subpoenaed footage can result in contempt of court charges.
Question 3: The ethical principle of 'transparency' in CCTV operations requires that:
- Camera lenses must be kept clean and transparent at all times
- The existence of surveillance systems is publicly disclosed to those being monitored (Correct answer)
- All footage must be made available to the public upon request
- Operators must be visible to those they are monitoring
Correct answer: The existence of surveillance systems is publicly disclosed to those being monitored
Transparency means that individuals should know they are in an area under surveillance, typically accomplished through posted notices.
Question 4: A security company installs CCTV cameras on behalf of a client. Regarding data ownership, the footage recorded is generally owned by:
- The security company that installed and maintains the system
- The client (property owner) on whose premises the cameras are installed (Correct answer)
- The government, as surveillance is considered a public safety function
- Both parties jointly, as established by contract law
Correct answer: The client (property owner) on whose premises the cameras are installed
The property owner (client) is generally considered the data controller and owner of footage captured on their premises, though contracts may specify different arrangements.
Question 5: Racial profiling through CCTV monitoring—such as directing cameras disproportionately at individuals based on race—is:
- Acceptable if crime statistics support the targeting
- A violation of civil rights laws including the Civil Rights Act of 1964 (Correct answer)
- Legal on private property where the owner sets the rules
- Permitted under exigent circumstances during criminal investigations
Correct answer: A violation of civil rights laws including the Civil Rights Act of 1964
Racially-biased surveillance targeting constitutes discrimination and violates the Civil Rights Act of 1964 as well as the Equal Protection Clause of the 14th Amendment.
Question 6: Which document should govern how long CCTV footage is retained within an organization?
- The organization's marketing strategy
- A formal data retention policy approved by management and legal counsel (Correct answer)
- The camera manufacturer's recommended storage guidelines
- The personal judgment of the head of security
Correct answer: A formal data retention policy approved by management and legal counsel
A formal, legally-reviewed data retention policy ensures retention periods are consistent, legally compliant, and defensible if challenged.
Question 7: A union employee argues that CCTV monitoring in the workplace violates the collective bargaining agreement. This dispute would most likely be resolved through:
- The National Labor Relations Board (NLRB) or grievance arbitration (Correct answer)
- The Department of Homeland Security
- The Federal Communications Commission (FCC)
- A civil lawsuit filed directly in federal district court
Correct answer: The National Labor Relations Board (NLRB) or grievance arbitration
Workplace surveillance disputes involving union agreements typically fall under NLRB jurisdiction or are handled through the grievance and arbitration process established in the collective bargaining agreement.
In California, the California Consumer Privacy Act (CCPA) as it relates to CCTV footage means businesses must: