When we think of GDPR data protection, we think of companies holding onto our name, date of birth, address, financial details etc. There is a method of obtaining data that is so widespread we barely notice it anymore – CCTV. If your business uses CCTV, did you know the images collected are classed as personal data? This means they are subject to GDPR data protection regulations.
The good news is that recording CCTV footage in shops, offices and restaurants is allowed. The business must have a solid policy, however, outlining the purposes for it. If it’s for security purposes, that’s fine, but you have to include what sort of security issues you are trying to monitor. Are you trying to stop heft or vandalism? If so, your policy should also include an explanation of why you chose CCTV. For example, if you have staff handling cash, you have a reason to record them at the till but not in the break room.
Your CCTV policy should cover three other points to meet your GDPR requirements. Just like with any other form of gathering data, you need to notify people that you are doing it. You should also ensure that the footage is stored securely. It’s important to state in your policy how long you intend to keep it and why. Eventually, you will be deleting old footage and disposing of old equipment. That’s why you need to consider secure hard drive destruction.
When the time comes to upgrade your CCTV system, merely deleting the footage and recycling the hard drive is not enough. To comply with your GDPR data protection obligations, you need to ensure that the hard drive is 100% destroyed. We can help you with this.
The only way to ensure that your video data is truly gone to satisfy GDPR data protection requirements is to hire a professional like us. We will come to your location and provide you with a Certificate of Destruction, documenting that your data has been completely and irretrievably destroyed. If you have questions, we can guide you through the process, we are the experts after all!
It’s easy to minimise the importance of destroying video. However, under the GDPR data protection rules, it is important. CCTV video can be misused in criminal ways. It can considered stalking, and it can inadvertently reveal financial or other details about an individual. The Data Protection Commission has laid out the obligations for businesses, individuals and communities that use CCTV. Cyclone Shredding can help you meet those obligations with our HDD destruction services. We are fully NAID and NSAI certified as well as holding a NWCP waste collection permit. Get in touch today to chat about your requirements on 1800 79 78 77.
