SIA CCTV Cheat Sheet 2026

The 30 highest-yield SIA CCTV facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the maximum penalty the ICO can issue for serious breaches of data protection law relating to CCTV? → £17.5 million or 4% of annual turnover
2. What does the Human Rights Act 1998 Article 8 protect in relation to CCTV? → The right to respect for private and family life
3. Why should CCTV cameras generally not be pointed at the interior of private residential properties? → It would violate the occupants' right to privacy under Article 8 of the Human Rights Act
4. Which principle under UK GDPR requires that CCTV footage must be protected against unauthorised access, loss, or destruction? → Integrity and confidentiality (security principle)
5. What effect does increasing the iris (aperture) of a CCTV camera have in low-light conditions? → It reduces the depth of field and allows more light onto the sensor
6. What ethical principle requires CCTV surveillance to be justified by a genuine need? → Proportionality
7. Under the Human Rights Act 1998, which Article is most relevant to CCTV surveillance in public places? → Article 8 - Right to Respect for Private and Family Life
8. Which principle of the Surveillance Camera Code of Practice states that CCTV should only be used for a specified purpose? → Principle 1
9. Under UK GDPR, who is the 'data controller' in relation to a CCTV system? → The organisation that determines the purposes and means of processing the footage
10. A member of the public requests to see CCTV footage of themselves. Under UK GDPR, this is known as what? → A subject access request (SAR)
11. Which colour fire extinguisher is safe and appropriate for use on a fire involving live electrical equipment in the UK? → Black (CO2)
12. In the context of a CCTV operator, what does 'lone working' mean? → Working in isolation without close or direct supervision
13. If CCTV footage is to be shared with the police, what must the operator ensure? → There is a lawful basis for the disclosure and it is documented
14. A member of the public requests a copy of CCTV footage that shows them under what right? → The right of subject access under UK GDPR (a Subject Access Request)
15. A member of the public submits a Subject Access Request (SAR) for CCTV footage in which they appear. What is the deadline for responding? → One calendar month
16. A CCTV operator is working alone and experiences a sudden medical emergency. Which measure would most effectively ensure their safety? → A working lone worker alarm or regular automated check-in system
17. What is the 'chain of custody' in relation to CCTV evidence? → A documented trail showing who has handled the evidence and when
18. What legal requirement exists regarding the appointment of a Data Protection Officer (DPO) for a public authority operating CCTV? → Public authorities and bodies are required to designate a DPO under UK GDPR Article 37
19. What is the primary purpose of a camera's 'preset' function? → To programme the camera to move to specific pre-defined positions
20. In a CCTV control room, which of the following would be classified as a workplace hazard? → Trailing cables running across a walkway
21. How often should CCTV cameras and equipment be inspected as part of routine maintenance? → Regularly, according to a planned maintenance schedule
22. If a CCTV operator observes a fire breaking out on camera within the premises, what is the most appropriate immediate action? → Alert the control room supervisor immediately and use CCTV to support the evacuation
23. What does the abbreviation RIDDOR stand for? → Reporting of Injuries, Diseases and Dangerous Occurrences Regulations
24. Under UK law, what must an organisation do before installing a CCTV system in a public area? → Conduct a Data Protection Impact Assessment (DPIA)
25. What is the recommended maximum retention period for CCTV footage according to ICO guidance? → There is no set period — it should be no longer than necessary
26. What signage requirement applies to most CCTV systems in the UK? → Signs must be clearly visible, showing who operates the system and contact details
27. Under UK GDPR, what does 'data minimisation' mean for CCTV operators? → Only collecting footage that is adequate, relevant, and limited to what is necessary
28. What must happen to CCTV footage once the retention period has expired? → It must be securely deleted or overwritten
29. A CCTV operator notices an attractive person on camera and zooms in to watch them. This is an example of what? → Voyeurism and a serious breach of professional conduct
30. Why is it important to record the time and date stamp when exporting CCTV evidence? → It provides a verifiable timeline that can corroborate or contradict witness statements