Does a company have to publish their CCTV policy on their website

Peregrinus wrote: »

No, they don't. They have to comply with GDPR requirements, but those requirements don't include publication of a policy.

"The principle of transparency means that individuals have a right to be informed about the processing of their personal data. Notification of CCTV usage can usually be achieved by placing easily-read and well-lit signs in prominent positions. A sign at all entrances will normally suffice indicating the purpose of the CCTV system and the identity and contact details of the data controller. A person whose images are recorded by a CCTV system must be provided with, either directly or in a way the individual can easily access, at least the following information:
The identity and contact details of the data controller
The contact details for the data protection officer, if one has been appointed
The purposes for which data are processed
The purpose and legal basis for the processing
Any third parties to whom data may be disclosed
The security arrangements for the CCTV footage
The retention period for CCTV footage
The existence of data subject rights and the right to lodge a complaint with theDPC"