SIA CCTV Legal Framework for CCTV

Question 1

Which legislation is the primary law governing the processing of personal data (including CCTV images) in the UK?

Accepted Answer

The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018

Answer

The Freedom of Information Act 2000

Answer

The Security Industry Authority Act 2001

Answer

The Computer Misuse Act 1990

Question 2

Under UK data protection law, which of the following is a lawful basis for processing CCTV footage?

Accepted Answer

Legitimate interests of the controller or a third party, where not overridden by individuals' rights

Answer

Any purpose the operator chooses

Answer

Curiosity or entertainment purposes

Answer

Commercial gain through footage sale

Question 3

What document provides authoritative guidance on the lawful and responsible use of surveillance camera systems in public places in England and Wales?

Accepted Answer

The Surveillance Camera Code of Practice (issued under the Protection of Freedoms Act 2012)

Answer

The SIA CCTV Operator Licence Guide

Answer

The ICO Employment Practices Code

Answer

The British Security Industry Association Guidelines

Question 4

Under UK GDPR, what is the maximum period that CCTV footage should typically be retained, as recommended by the ICO?

Accepted Answer

31 days, unless there is a specific reason to keep it longer

Answer

6 months

Answer

1 year

Answer

Indefinitely for security purposes

Question 5

The Information Commissioner's Office (ICO) is the UK's independent supervisory authority for data protection. What power does the ICO have if a CCTV operator commits a serious breach of UK GDPR?

Accepted Answer

To issue fines up to £17.5 million or 4% of global annual turnover (whichever is higher), issue enforcement notices, and prosecute for criminal offences

Answer

To issue guidance only — it cannot impose penalties

Answer

To revoke the operator's SIA licence

Answer

To report the breach to the police only

Question 6

A member of the public requests a copy of CCTV footage that shows them under what right?

Accepted Answer

The right of subject access under UK GDPR (a Subject Access Request)

Answer

The right to erasure

Answer

The right to restriction of processing

Answer

The Freedom of Information Act 2000