Data Protection Act (DPA) 1998

The role of DPA is to ensure that all personal data is used in a professional and responsible manner, and to eliminate the usage of any data for voyeuristic or entertainment purposes. CCTV images are classified as ‘data’ by the DPA. This means that the Act is applicable to CCTV security systems.

Code of Practice

All CCTV systems users must be trained and 'Code of Practice & Operating Procedure' must be produced and circulated.  Security guidelines have to be followed when storing all recording devices and recorded media.  Recording devices have to regularly checked and serviced, and to have a maintenance log book.  As Police might require the CCTV images for evidential purposes, the recordings should be clear, with correct information about date and time.

The current transition from Tape Based Recording to Digital Recording Systems has made it easier for users to comply with the DPA and limit the access to the video footage to authorised operators only.

This information is given as a general guide only.  It is not intended to contain definitive legal advice.  Professional legal advice should be sought as appropriate in relation to a particular matter.