CCTV Request...how?

mel123

I think this is the best place for this question, however, mods please move if not.

I cant find the answer online my question is how do i request CCTV of me/a time from a financial institute? Someone told me I have to go to the guards and they have to request it but not sure if that is right?

Credit Checker Moose

Simply write to the bank and request the footage under a Subject Access Request. They have to give it to you.

whomitconcerns

Well that's assuming you are the only person visible on the footage..

Credit Checker Moose

They will have to obscure everyone else. Not the OP's problem.

mel123

How do they know its me?
Now ill give them details of time i pulled up at and colour of car etc, but just wondering how do i prove its me, should i send ID in or anything?

Sorry for what might seem like a stupid question.

Maxx355

As above, just write to the bank's Data Controller and request it, you will need to have time, date etc. Some systems can blur other persons in the frame, and you need to request it before 31 days of being there as it will self delete.

mel123

Its over 31 days (funnily enough their complaints procedure is 45 days), but i *think* a financial institute hold for longer than 31 days

ohnonotgmail

mel123 wrote: »

How do they know its me?
Now ill give them details of time i pulled up at and colour of car etc, but just wondering how do i prove its me, should i send ID in or anything?

Sorry for what might seem like a stupid question.

In fairness that isn't a stupid question. The bank will have to obscure the faces of everybody but the person making the subject access request. But how do they know which face belongs to the person making the request?

killanena

Guards are the only ones allowed copies of CCTV where I work. If a customer wants footage they have to go through the guards.

Credit Checker Moose

Good luck with that when the Data Protection Commissioner comes a knocking.

Effects

Credit Checker Moose wrote: »

Simply write to the bank and request the footage under a Subject Access Request. They have to give it to you.

Some banks go out of their way not to give it to you.

mel123

Credit Checker Moose wrote: »

Good luck with that when the Data Protection Commissioner comes a knocking.

What do you mean, they take so long??

mel123

killanena wrote: »

Guards are the only ones allowed copies of CCTV where I work. If a customer wants footage they have to go through the guards.

Do you work in a financial institute?

harr

Apply in writing, I think you do have to pay a small fee ? You will need exact time and area you want a copy of . As mentioned anybody else in the footage will have to be blurred out.
In my experience very few Cctv systems have the Capability currently to blur faces. So this means having to get an external company to do this which can take a considerable amount of time and at a cost to the business.

Robbo

ohnonotgmail wrote: »

In fairness that isn't a stupid question. The bank will have to obscure the faces of everybody but the person making the subject access request. But how do they know which face belongs to the person making the request?

It's accepted practice that you identify yourself when putting in the SAR. It also makes everyone's life easier if you can throw in some detail which may help pick out the footage.

Comedian Mark Thomas did a bit involving CCTV SARs where he countered the "wah wah, it's too hard to go through the tapes and find what you're looking for" whinge by employing a troupe of morris dancers to make sure that the footage stuck out a mile.

Robbo

harr wrote: »

Apply in writing, I think you do have to pay a small fee ? You will need exact time and area you want a copy of . As mentioned anybody else in the footage will have to be blurred out.
In my experience very few Cctv systems have the Capability currently to blur faces. So this means having to get an external company to do this which can take a considerable amount of time and at a cost to the business.

Fees for access have been abolished.

If a company has issue with respecting the fundamental rights of citizens on the grounds of cost or difficulty, it has no business operating surveillance systems.

Credit Checker Moose

harr wrote: »

Apply in writing, I think you do have to pay a small fee ? You will need exact time and area you want a copy of . As mentioned anybody else in the footage will have to be blurred out.
In my experience very few Cctv systems have the Capability currently to blur faces. So this means having to get an external company to do this which can take a considerable amount of time and at a cost to the business.

Since GDPR there is now no fee.

harr

Robbo wrote: »

Fees for access have been abolished.

If a company has issue with respecting the fundamental rights of citizens on the grounds of cost or difficulty, it has no business operating surveillance systems.

I understand that , but when you have a small business and someone is looking for themselves sometime last Tuesday between 8am and 6pm it takes up a lot of man hours.

Homer

harr wrote: »

I understand that , but when you have a small business and someone is looking for themselves sometime last Tuesday between 8am and 6pm it takes up a lot of man hours.

Just tell them the camera wasn’t working that day. Simple way of getting rid of time wasters.

Del2005

Robbo wrote: »

Fees for access have been abolished.

If a company has issue with respecting the fundamental rights of citizens on the grounds of cost or difficulty, it has no business operating surveillance systems.

So you want a company to spend time and resources for something which is not their role and also purchase expensive video editing software since they would need to blur out the other people whose rights have also to be respected, so it's a choice of respect the rights of 1 individual or the rights of many. They should just issue all CCTV blurred and then everyone's privacy is respected.

ohnonotgmail

Del2005 wrote: »

So you want a company to spend time and resources for something which is not their role and also purchase expensive video editing software since they would need to blur out the other people whose rights have also to be respected, so it's a choice of respect the rights of 1 individual or the rights of many. They should just issue all CCTV blurred and then everyone's privacy is respected.

they have a legal responsibility to fulfill the request.

dudara

harr wrote: »

I understand that , but when you have a small business and someone is looking for themselves sometime last Tuesday between 8am and 6pm it takes up a lot of man hours.

You are entitled to ask them to be more specific. It is possible to reject or refuse to respond frivolous/spurious/time-wasting requests.

While SARs are free under GDPR, it is permitted to charge a fee where a request is particularly onerous. (The law isn’t unreasonable). However all this must be outlined in advance to the requestor.

Robbo

Del2005 wrote: »

So you want a company to spend time and resources for something which is not their role and also purchase expensive video editing software since they would need to blur out the other people whose rights have also to be respected, so it's a choice of respect the rights of 1 individual or the rights of many. They should just issue all CCTV blurred and then everyone's privacy is respected.

If you're processing data, dealing with it correctly is your role.

For the purposes of your scenario; there are companies that will redact video for you (and these are often the same people who will have installed it in the first place) or you can achieve the same ends with free open-source software. You can also take the Blue Peter approach and get busy with a black marker or MSPAINT.

Del2005

Robbo wrote: »

If you're processing data, dealing with it correctly is your role.

For the purposes of your scenario; there are companies that will redact video for you (and these are often the same people who will have installed it in the first place) or you can achieve the same ends with free open-source software. You can also take the Blue Peter approach and get busy with a black marker or MSPAINT.

What valid reason do you have for sending the personal data of people who haven't requested their information though? Only 1 person has requested their data, no others persons data can be released to a 3rd party as there is no good reason for the other company to have their data, they have a valid reason for the requestors data but not any other personal data captured. So to process 1 request for personal data multiple people's personal data is shared, that's not GDPR compliant.

Robbo

Del2005 wrote: »

What valid reason do you have for sending the personal data of people who haven't requested their information though? Only 1 person has requested their data, no others persons data can be released to a 3rd party as there is no good reason for the other company to have their data, they have a valid reason for the requestors data but not any other personal data captured. So to process 1 request for personal data multiple people's personal data is shared, that's not GDPR compliant.

I'm at a loss here since we've teased out redaction over the last number of posts.

The intermingling of the personal data of different subjects doesn't make a discrete access request impossible.

You might want to check out Recitals 63 & 64.

BattleCorp

Del2005 wrote: »

What valid reason do you have for sending the personal data of people who haven't requested their information though? Only 1 person has requested their data, no others persons data can be released to a 3rd party as there is no good reason for the other company to have their data, they have a valid reason for the requestors data but not any other personal data captured. So to process 1 request for personal data multiple people's personal data is shared, that's not GDPR compliant.

If you don't have the technical ability to redact the image of other people on the footage, you are allowed to use outside agencies to do this for you.

GDPR doesn't mean that you can't share data with others. It means that you must have good reasons and do things in a controlled manner. And it has to be done in a legal manner obviously.

I've used third party companies to redact footage and they are always very anal about signing chain of custody agreements etc.