Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Does a company have to publish their CCTV policy on their website

  • 12-07-2019 7:42am
    #1
    Registered Users, Registered Users 2 Posts: 3,527 ✭✭✭


    Just wondering.... when you see 'these premises are under CCTV surveillance ' does the company have to publish their policy somewhere so that you can read what they are recording and why??


Comments

  • Registered Users, Registered Users 2 Posts: 26,998 ✭✭✭✭Peregrinus


    No, they don't. They have to comply with GDPR requirements, but those requirements don't include publication of a policy.


  • Registered Users, Registered Users 2 Posts: 10,900 ✭✭✭✭Riskymove


    Peregrinus wrote: »
    No, they don't. They have to comply with GDPR requirements, but those requirements don't include publication of a policy.

    technically GDPR requires a privacy notice or some other way of informing subjects why they have CCTV and what it will be used for etc.
    "The principle of transparency means that individuals have a right to be informed about the processing of their personal data. Notification of CCTV usage can usually be achieved by placing easily-read and well-lit signs in prominent positions. A sign at all entrances will normally suffice indicating the purpose of the CCTV system and the identity and contact details of the data controller. A person whose images are recorded by a CCTV system must be provided with, either directly or in a way the individual can easily access, at least the following information:
    The identity and contact details of the data controller
    The contact details for the data protection officer, if one has been appointed
    The purposes for which data are processed
    The purpose and legal basis for the processing
    Any third parties to whom data may be disclosed
    The security arrangements for the CCTV footage
    The retention period for CCTV footage
    The existence of data subject rights and the right to lodge a complaint with theDPC"

    The DPC has recommended as best practice a CCTV policy but it is not mandatory but some way must be found to inform people


Advertisement