SIA CCTV Legal Framework for CCTV 2

Question 1

Which piece of legislation enshrines the right to privacy in UK law and must be balanced against surveillance camera operations?

Accepted Answer

The Human Rights Act 1998 (incorporating Article 8 of the ECHR — the right to respect for private and family life)

Answer

The Human Rights Act 1998 incorporates the European Convention on Human Rights into UK law. Article 8 ECHR protects the right to respect for private and family life, home, and correspondence. CCTV surveillance must be proportionate and legally justified to avoid breaching this right.

Question 2

Under the Data Protection Act 2018, which principle requires that CCTV images should only be used for the purpose for which they were collected?

Accepted Answer

Purpose limitation

Answer

The purpose limitation principle (UK GDPR Article 5(1)(b)) requires that personal data collected for specified, explicit, and legitimate purposes must not be processed in a manner incompatible with those purposes. CCTV footage collected for security cannot be freely used for unrelated purposes.

Question 3

What is a 'Data Protection Impact Assessment' (DPIA) and when is one required for CCTV systems?

Accepted Answer

A systematic assessment of the privacy risks of a data processing activity, required where processing is likely to result in a high risk to individuals, including CCTV in public areas

Answer

A DPIA (required under UK GDPR Article 35) is a process to identify and minimise privacy risks. For CCTV, a DPIA is typically required for systematic monitoring of publicly accessible areas, covert surveillance, or where the scale of monitoring could have significant impact on individuals.

Question 4

The Protection of Freedoms Act 2012 established the Surveillance Camera Commissioner. What is the Commissioner's role?

Accepted Answer

To encourage compliance with the Surveillance Camera Code of Practice by relevant authorities, provide guidance, and review how the Code is working

Answer

The Surveillance Camera Commissioner (established under the Protection of Freedoms Act 2012) encourages compliance with the Surveillance Camera Code of Practice among relevant authorities, reviews its operation, and provides guidance. The role is advisory and regulatory rather than prosecutorial.

Question 5

Under the UK GDPR, how should a CCTV system operator notify individuals that they are being recorded?

Accepted Answer

Through clear and visible signage indicating that CCTV is in operation, the purpose, and the identity of the data controller

Answer

UK GDPR requires data controllers to provide privacy information to data subjects. For CCTV, this is typically done through prominent, clear signage at entry points indicating that CCTV is in use, the purpose, and how to find out more (including the data controller's identity and contact details).

SIA CCTV Operator Practice Test

SIA CCTV Operator Practice Test

SIA CCTV Legal Framework for CCTV 2