CCTV Code of Practice
This Code of Practice aims to ensure that the CCTV systems Installed and operated by Sandwich Marina comply with the law and that the scope, purpose and use of the systems are clearly defined.
For the purpose of the Code of Practice the following definitions will apply:
- “Marina” refers to Sandwich Marina.
- “CCTV” is Closed Circuit Television System.
- “Data Protection Officer” is Sandwich Marina.
- “ANPR” is Automated Number Plate Recognition.
This Code of Practice is binding on all employees of the Marina and all employees of contracted out services. It also applies to all other persons who maybe present, for whatever reason, on Marina property.
The CCTV system is operated by Marina staff whose personnel are employed directly by the Marina.
The CCTV system, all recorded material and copyright are owned by the Marina.
The following principles will govern the operation of the CCTV system.
- The CCTV system will be operated fairly and lawfully and only for the purposes authorised by the Marina.
- The CCTV system will be operated with due regard for privacy of the individual.
- Any changes to the purposes for which the CCTV system is operated will require the prior approval of the Head of Corporate Services and will be published in advance.
The system is intended to provide an increased level of security in the Marina environment for the benefit of those who work, live in or visit the Marina.
The CCTV system will be used to respond to the following key objectives, which will be subject to annual assessment by use of statistics.
- To detect, prevent or reduce the incidence of crime.
- To prevent and respond effectively to all forms of harassment and public disorder.
- To reduce the fear of crime and create a safer community.
- To gather evidence by a fair and accountable method.
- To provide emergency services assistance.
- To assist with health and safety issues by detecting potential incidents.
- Facilitate the ability to:
- The identification, apprehension and prosecution of offenders in relation to crime and public order.
- The identification of any activities/events which might warrant disciplinary proceedings being taken against staff.
- Providing evidence to appropriate people who are involved in disciplinary investigations.
- The movement of vehicles on the Marina.
- As confidence in the system is essential, all cameras will be operational. An appropriate maintenance programme is established.
The CCTV system consists of cameras situated on Marina property, which record activities in that area.
Cameras shall be installed in such a manner as not to overlook private domestic areas. Cameras shall not be hidden from view and signs will be prominently displayed. The signs will indicate:
- The presence of monitoring and recording.
- The ownership of the system.
- Contact telephone number.
If at any time mobile cameras are employed, their use will also be governed by this Code of Practice.
Where images of living, identifiable individuals are deliberately recorded, this is likely to comprise those individuals’ personal data. The collection, use and storage of personal data are governed by the Data Protection Act 1998. The Marina is registered with the Commissioner as a Data Controller operating CCTV.
Given that any particular sequence of CCTV recording may include personal data, all such recordings will be treated in accordance with the Data Protection Principles set out in the appendix.
Data subjects’ rights, including a right of access to their personal data, (in accordance with Section 7 of the Data Protection Act), will be respected where recordings are confirmed to comprise personal data. Where an individual requests access to recordings believed to be their personal data, the matter shall be referred to the Data Protection Officer.
Access to Live Footage Images captured by the system will be monitored in the Marina Office. For operational purposes, and in accordance with the stated purposes of the system, only designated staff, trained in their duties, shall have access to live CCTV footage.
Live images may be viewed at any time by the police, however the police do not have the power to record the images or to re-position or focus the cameras directly.
Access to Recordings For operational purposes and in accordance with the stated purposes of the system, only designated staff shall have primary access to CCTV recordings. Access may be granted to the police (see below) if appropriate and the requisite data release form is completed.
The Data Protection Officer or nominee may permit the viewing of the CCTV recorded materials by other Marina staff where this is necessary in connection with the prevention of crime, assisting in the apprehension and prosecution of offenders or matters of national security.
Where Marina staff requires access to CCTV recorded materials for any other purpose, the matter shall be referred to the Data Protection Officer.
Disclosure of Recorded Material As the main purpose of the CCTV system is to prevent crime and assist in the apprehension and prosecution of offenders, the Data Protection Officer may release CCTV recorded materials to the police where the Marina has initiated contact with the police and there is a reasonable belief that the CCTV recorded materials will be of assistance.
Where the police or other official body with prosecuting powers approach the Marina and request access to CCTV recorded materials they shall be asked to provide appropriate documentation confirming that the information is necessary for either the prevention of crime or the apprehension or prosecution of offenders, or matters of national security. Additionally, the Marina DPO must be informed of all disclosures and keep a log of them.
Where any other person requests access to CCTV recorded materials, this request shall be forwarded to the Data Protection Officer.
In all cases where recorded materials are disclosed outside the Marina, the Data Protection Officer shall ensure that the disclosure is logged and duly signed for.
CCTV recordings and other materials produced from them shall be retained for a maximum of 60 days unless an incident is recorded which requires further investigation either by the Marina, the police or another external body with prosecuting powers.
In the latter case, recordings shall be kept for a period of three years from the date of recording.
All media that are no longer required, on which recordings were made will be shredded (in the case of CD/DVD discs) and the appropriate details entered in the Destruction Records.
A copy of this Code of Practice will be made available to anyone requesting it. Any complaint concerning misuse of the system will be treated seriously and investigated by the Data Protection Officer.
The Data Protection Officer or nominee will ensure that every complaint is acknowledged in writing within seven working days, which will include advice to the complainant of the enquiry procedure to be undertaken.
Where appropriate, the police will be asked to investigate any matter relating to the CCTV system which is deemed to be of a criminal nature.
Processing shall be taken to mean all operations including obtaining, recording, storing, analysing or converting into other formats.
- Personal data shall be processed fairly and lawfully (and in accordance with the grounds set out in Schedules 2 and 3 or the Act, as appropriate).
- Personal data shall be obtained only for one or more specified and lawful purposes and shall not be processed in a manner incompatible with those purposes.
- Personal data shall be adequate, relevant and not excessive in relation to the purpose for which the data is held.
- Personal data shall be accurate and, where necessary, kept up to date.
- Personal data shall not be held any longer than is necessary in relation to the stated purposes.
- Personal data will be processed in accordance with the rights of data subjects under the Data Protection Act 1998.
- The Data Protection Officer shall take appropriate security measures to prevent unauthorised or accidental access to alteration, disclosure or loss and destruction of personal data.
- Personal data will not be transferred outside the European Economic Area without ensuring there is an adequate level of protection in relation to the processing of personal data.