Connect with us

Hi, what are you looking for?

Editor’s Pick

CCTV footage: a GDPR nightmare?

The leaking of former Health Secretary Matt Hancock’s affair via CCTV footage recently dominated headlines, ultimately resulting in his resignation. However, it also raised questions regarding the GDPR and privacy issues associated with CCTV in the workplace.

So, how can businesses stay on the right side of the law when implementing this technology? Martin Noble, partner and data protection expert at law firm, Shakespeare Martineau explains.

People often associate personal data with details such as phone numbers and email addresses, however images of individuals also fall under the umbrella of personal data. As a result, any business that is recording their employees via CCTV must follow the correct GDPR processes or face serious penalties.

Before installing CCTV, employers should carry out a data protection impact assessment (DPIA) where the use of surveillance camera data is likely to result in a high risk to individual privacy. A DPIA identifies the risks of handling the data, and ways to mitigate these. For example, every individual has a right to privacy, and the use of the CCTV must be justified when balanced against this. Employers should consider minimising the impact on people’s privacy, such as putting cameras outside of offices rather than in them or keeping them to communal areas only and ensuring they don’t capture sound. As a rule of thumb, if there is a way to gain the same information in a less intrusive manner, then that option must be chosen. The DPIA should also identify the legal basis that the employer intends to use for using the CCTV. If this is on the basis of identified “legitimate interests” then they cannot outweigh individual interests, rights and freedoms.

It is not just a case of keeping a DPIA on record though. As part of the overall assessment, it may also be prudent to speak to relevant stakeholders in the business, including employees. Having decided to use CCTV, employers will need to make all employees aware that their data is being captured. Due to the imbalanced nature of the employer-employee relationship, consent cannot be relied upon as a lawful basis for processing such data. Instead, employees should be able to access a privacy policy that sets out the grounds that the business is relying on to handle the data. This should include how it will be used, how it will be stored, how long it will be stored, and who can access it.

Any data collected should only be used in accordance with the privacy policy, such as for health and safety reasons or to monitor employee behaviour to prevent misconduct. Notices should also be clearly placed around the building which notify people that CCTV is in operation, as visitors also need to be made aware that their personal data is being captured.

However, should a business owner have concerns about a specific employee for example, there is no law against the use of covert cameras. Nevertheless, they must still be able to demonstrate that there is a lawful basis for planting a camera, and that this isn’t outweighed by the rights of the individual. A DPIA must be carried out to cover those circumstances.

Matt Hancock appears to have been caught by a covert camera, placed there without the Government’s permission. This was reported as being an ‘outlier’ which meant that it was not on the main CCTV circuit or installed by his employer. Employers do have a duty to look after their employees and this has raised some security issues in terms of how the footage was obtained in the first place. If they could be found, then the person who planted the camera would face a claim for breach of privacy.

Even if fully informed about the use of CCTV in the workplace, employees do still have the right to object if they don’t agree with the way their personal data is being processed. Initially, employers should offer to explain in more detail the reasoning for the CCTV, as clarification regarding its purpose and usage may be all that’s required to put the employee’s mind at ease. However, should they continue to claim that it is overly intrusive, employers will have to consider how best to move forward.

If there is a particular camera that is of concern, removing it may be the simplest option. On the other hand, if it is the concept of CCTV itself that the employee disagrees with, then the employer must consider whether the individual’s rights are likely to override the legitimate interests they seek to protect. If they believe that their grounds do not override the employee’s rights, then they can choose to keep the cameras as they are.

Should the CCTV stay in place, and the employee continues to have concerns, then the business could face a claim by the affected individual for breach of data protection legislation and their right to privacy. The employee also has the option to escalate the complaint to the ICO, which has the power to investigate and issue fines for GDPR breaches. These fines differ depending on the severity of the offence and are capped at a multiple of their overall turnover, meaning they can lead to a significant financial loss for non-compliant businesses. This is why being able to demonstrate the legal basis for using CCTV is vital.

CCTV is more prevalent than ever now that the technology is more affordable, with SMEs as well as large corporates able to install it in the workplace. However, there is no threshold for GDPR compliance, with businesses of any size having to follow the correct procedures. Seeking legal advice before implementing CCTV can help employers to ensure they carry out the necessary checks, avoiding costly fines.

Your information is secure and your privacy is protected. By opting in you agree to receive emails from us. Remember that you can opt-out any time, we hate spam too!

Latest

Editor’s Pick

People living in rural areas are having to travel further to find somewhere to withdraw and deposit cash free of charge, says the...

Editor’s Pick

Ministers have ruled out extending the list of workers who are exempt from self-isolation rules and warned that the August 16 date for...

News

Philippine-based companies that offer online gambling services to offshore markets, such as China, fueled office market growth in the country last year. — REUTERS...

News

PHILIPPINE STAR/ MICHAEL VARCAS President Rodrigo R. Duterte on Friday approved the recommendation of his pandemic task force to enforce stricter quarantine rules in...

News

https://www.sws.org.ph/ Thirty-seven percent of Filipinos are optimistic that their lives will improve over the next 12 months, a non-commissioned survey shows. Of the 1,200...

News

Energy Secretary Alfonso G. Cusi — PHILSTAR Six electricity consumers on Friday filed a complaint with the Ombudsman against Department of Energy (DoE) Secretary...

You May Also Like

When people envision technology overtaking society, many think of The Terminator and bulletproof robots. Or Big Brother in George Orwell’s Nineteen Eighty-Four, a symbol...

Financial Advisors

Stock Markets9 hours ago (Jul 02, 2020 04:45AM ET) (C) Reuters. ROME (Reuters) – World food prices rose in June to post their first...

Economy

SAN FRANCISCO — The spread of the coronavirus has meant feast or famine for technology start-ups. While many are cutting staff and slashing costs...

Economy

In Wisconsin and Ohio, farmers are dumping thousands of gallons of fresh milk into lagoons and manure pits. An Idaho farmer has dug huge...

Disclaimer: Respect Investment.com, its managers, its employees, and assigns (collectively "The Company") do not make any guarantee or warranty about what is advertised above. Information provided by this website is for research purposes only and should not be considered as personalized financial advice. The Company is not affiliated with, nor does it receive compensation from, any specific security. The Company is not registered or licensed by any governing body in any jurisdiction to give investing advice or provide investment recommendation. Any investments recommended here should be taken into consideration only after consulting with your investment advisor and after reviewing the prospectus or financial statements of the company.

Copyright © 2021 Respect Investment. All Rights Reserved.

Your information is secure and your privacy is protected. By opting in you agree to receive emails from us. Remember that you can opt-out any time, we hate spam too!