1. Policy Statement
C Plus Security is committed to operating CCTV surveillance systems in a lawful, responsible, and professional manner. CCTV monitoring is an essential part of modern security services and plays an important role in protecting people, property, and assets.
This policy ensures that all CCTV systems operated or monitored by C Plus Security are used fairly, transparently, and in full compliance with UK data protection laws.
C Plus Security will comply with all relevant legislation, including:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Protection of Freedoms Act 2012
- Human Rights Act 1998
- ICO CCTV Code of Practice (where applicable)
We understand that CCTV footage may contain personal data. Therefore, we will take appropriate steps to ensure that surveillance activities respect privacy rights while maintaining security effectiveness.
2. Purpose
The purpose of this policy is to:
- Ensure CCTV systems are used for legitimate security purposes only
- Protect the privacy and rights of individuals
- Prevent misuse or unauthorised access to CCTV footage
- Establish clear procedures for monitoring, recording, storage, and disclosure
- Support professional incident reporting and evidence handling
3. Scope
This policy applies to:
- All C Plus Security employees involved in CCTV monitoring or access control
- All client CCTV systems monitored by C Plus Security
- Any CCTV footage recorded, stored, or handled by the company
- All control rooms and surveillance locations operated by C Plus Security
This includes fixed CCTV systems, mobile CCTV systems, and body-worn cameras where used under company operations.
4. Acceptable Use of CCTV
CCTV surveillance may be used for:
- Crime prevention and detection
- Monitoring suspicious behaviour
- Protecting staff, clients, and the public
- Supporting incident investigations
- Improving site safety and security operations
- Providing evidence to support legal proceedings
CCTV must not be used for:
- Personal viewing or entertainment
- Monitoring individuals without a valid security reason
- Discrimination, harassment, or unfair targeting
- Unauthorised sharing on social media or private messaging platforms
Any misuse of CCTV footage is considered a serious breach and may result in disciplinary action or legal consequences.
5. CCTV Monitoring Responsibilities
Management Responsibilities
C Plus Security management will ensure:
- CCTV operators are trained and competent
- Monitoring is conducted professionally and lawfully
- Access is restricted to authorised personnel
- Systems are maintained and working correctly
- Data retention and deletion rules are followed
Employee Responsibilities
All CCTV operators must:
- Monitor screens professionally and remain alert
- Report suspicious activity immediately
- Record incidents accurately in logbooks or reporting systems
- Follow client site instructions and escalation procedures
- Maintain confidentiality at all times
- Never copy, download, or share footage without authorisation
6. Signage and Transparency
Where C Plus Security installs or manages CCTV systems, clear signage should be displayed to inform individuals that CCTV is in operation.
Signage must include:
- The purpose of CCTV monitoring
- Contact details of the responsible organisation (where required)
Where CCTV monitoring is handled at a client site, C Plus Security will ensure monitoring aligns with the client’s CCTV signage and privacy requirements.
7. Storage and Retention of CCTV Footage
CCTV footage must be stored securely and accessed only when necessary.
CCTV footage will be:
- Stored securely with restricted access
- Retained only for as long as required for security purposes
- Deleted securely once retention periods expire (unless required for investigation)
Retention periods may vary depending on client requirements, site policies, or legal obligations.
8. Access to CCTV Footage
Only authorised personnel may access CCTV footage.
Footage may be accessed for:
- Reviewing incidents
- Supporting investigations
- Providing evidence to law enforcement
- Responding to subject access requests (SARs)
All access requests must be recorded, including:
- Who accessed the footage
- Reason for access
- Date and time of access
- Whether footage was copied or shared
9. Disclosure of CCTV Footage
CCTV footage may only be shared when lawful and necessary, including:
- Police investigations
- Court proceedings
- Client-authorised investigations
- Insurance or legal matters
Footage must never be shared with unauthorised third parties or posted online.
Any disclosure must be approved by management and handled in line with GDPR and confidentiality rules.
10. Data Breaches
If CCTV footage is lost, stolen, accessed unlawfully, or shared improperly, it will be treated as a data breach.
All suspected breaches must be reported immediately to management. Investigations will be conducted and, where required, the breach will be reported to the Information Commissioner’s Office (ICO).
11. Policy Breaches
Failure to comply with this policy may result in disciplinary action, including dismissal. Serious breaches may also lead to legal action.
12. Policy Review
This policy will be reviewed annually or earlier if required due to changes in law, technology, or operational requirements.