Organisations should review their existing data protection and privacy practices

against the requirements of the UK GDPR and the Data Protection Act 2018 to

identify any actions needed to achieve and maintain compliance.

TVS CCTV Ltd Unit 5d Moor Business Park Ellough Road Beccles Suffolk NR34 7TQ t: 01502 464 643

Organisations must implement appropriate technical and organisational

security measures to protect personal data and confidential information

against unauthorised or unlawful processing, accidental loss, destruction,

damage, or theft, whether on-site or off-site.

Organisations should ensure and be able to demonstrate compliance with the

UK GDPR and other applicable legislation. Further advice and guidance can be

found on the Information Commissioner’s Office (ICO) website

Even the best CCTV system is only as effective as the procedures used to record,

document, and submit the evidence. Failure to do so correctly could result in

evidence being ruled inadmissible.

TVS CCTV manufactures compliance evidence download packs designed for CCTV systems and data protection requirements. Packs can include recordable CDs, DVDs, or USB flash drives, together with GDPR management documentation, Data Subject Access Request (DSAR) forms, and visitor logbooks.

HOW CLEAR IS YOUR EVIDENCE?

We have extensive experience supporting clients throughout the UK with the supply and management of CCTV replenishment programmes. Our clients include District Councils, Police Authorities, major retail chains, fast food outlets, supermarkets, DIY stores, petrol stations, fitness centres, NHS organisations, and many other businesses. TVS CCTV also offers professional CD and DVD disc printing services, including serial numbering and/or barcoding, with custom company branding and logos included at no additional cost.

Demonstrating Compliance with UK GDPR and

the Data Protection Act 2018

Video Surveillance Systems (VSS) and UK GDPR Compliance The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 govern how organisations collect, process, store and use personal data, including images and recordings captured by Video Surveillance Systems (VSS). Following the UK’s departure from the European Union, the EU GDPR was incorporated into UK law as the UK GDPR from 1 January 2021. Organisations operating in the UK must therefore comply with UK data protection legislation and guidance issued by the Information Commissioner’s Office (ICO). The UK GDPR applies to the use of surveillance technologies including: • Video Surveillance Systems (VSS) • Closed-Circuit Television (CCTV) • Body Worn Cameras (BWC) • Automatic Number Plate Recognition (ANPR) systems • Unmanned Aerial Vehicles (UAVs) / drones Organisations of all sizes should understand their responsibilities when processing personal data through surveillance systems and ensure that appropriate technical and organisational measures are in place. This includes: • Having a lawful basis for processing personal data • Providing clear and transparent privacy information • Maintaining appropriate retention and deletion policies • Securing recorded data against unauthorised access • Managing Data Subject Access Requests (DSARs) • Maintaining contracts and data processing agreements with third-party service providers • Documenting decisions, policies and procedures relating to surveillance activities The ICO expects organisations to demonstrate accountability and proportionality in their use of surveillance systems. Maintaining robust policies, procedures and audit trails will help demonstrate compliance and reduce the risk of enforcement action.