GDPR and CCTV

GDPR is an acronym for General data protection regulation, which any organization operates in any European countries or target customers in the area, must comply with this new data security rules or you may be fined up to €20 million or 4% of your turnover (whichever is greater).

The Use of CCTV & GDPR

CCTV is used very commonly among all businesses, but under the GDPR, business owners need to have a ‘strong’ and ‘fair’ reasons explaining why they need to use CCTV in the areas. One particular example will be to protect employees health and safety. When CCTVs are installed, the business owners, must have signs and contact information which warns the people around CCTVs are in placed or they contact you if they have any enquiries.

Most CCTVs footages can be kept in 30 days, but if business owners want to keep in longer period, they must have a risk assessment and explain why.

The CCTVs footages must be encrypted and the business owners must have a contract in place with their
data processors and explain what they can do and can’t do.