SIA CCTV Data Protection (UK GDPR) 2

Question 1

What is a 'data breach' in the context of CCTV operations?

Accepted Answer

When personal data is accidentally or unlawfully accessed, disclosed, altered, or destroyed

Answer

When a camera stops recording

Answer

When footage quality is poor

Answer

When a camera is vandalised

Question 2

How quickly must a data breach involving CCTV footage be reported to the ICO if it poses a risk to individuals?

Accepted Answer

72 hours

Answer

24 hours

Answer

7 days

Answer

30 days

Question 3

What is the purpose of a 'privacy impact assessment' for a CCTV system?

Accepted Answer

To identify and minimise the privacy risks associated with the CCTV system

Answer

To calculate the cost of the system

Answer

To test whether the cameras work properly

Answer

To determine how many cameras are needed

Question 4

If CCTV footage is to be shared with the police, what must the operator ensure?

Accepted Answer

There is a lawful basis for the disclosure and it is documented

Answer

The footage is edited first

Answer

The footage is only shared verbally

Answer

No documentation is needed for police requests

Question 5

What principle of UK GDPR requires that CCTV footage be kept accurate and up to date?

Accepted Answer

Accuracy

Answer

Purpose limitation

Answer

Data minimisation

Answer

Storage limitation

Question 6

Under UK GDPR, what does 'data minimisation' mean for CCTV operators?

Accepted Answer

Only collecting footage that is adequate, relevant, and limited to what is necessary

Answer

Using the cheapest cameras available

Answer

Recording for the shortest possible time

Answer

Having the minimum number of operators