The purpose of CCTV at Ards and Comber Vets is to:
- Protect the safety, security and well-being of staff, patients, visitors and contractors
- Prevent and detect crime within the practice, and may be used to support the prosecution of offenders
- Facilitate learning through reflection as a result of incidents occurring within the monitored areas
CCTV will not be used for any purpose other than those specified above.
CCTV cameras are positioned in the following locations:
- Consult rooms
- Main Reception Area
All cameras are overtly positioned and do not impede on any clinical areas within the practice. Appropriate signage (using the template at Annex A) is positioned throughout the practice in the following locations:
- Building Entrance
- Reception desk
1.2 Retention of images and information
A proportionate approach is used to inform retention periods; however, images and information acquired from the surveillance system at Ards and Comber Vets will not be kept for longer than is necessary. There may, however, be occasions where it is necessary to retain images for a longer period, i.e. when a crime is being investigated.
The agreed retention period for CCTV images at Ards and Comber Vets is 11 days. All images are saved on to the hard drive of the CCTV and they are automatically deleted after 11 days/.
1.3 Accessing retained images and information
Access to retained images is restricted to the data controller at Ards and Comber Vets , who is James Buick. In their absence, Robert McCabe is authorised to access the retained images and information.
There may be, on occasion, requests by data subjects (individuals) to access images and information that is held about them. In accordance with the GDPR, all data subjects have a right to access their data and any supplementary information held by Ards and Comber Vets . Data subjects have a right to receive:
- Confirmation that their data is being processed
- Access to their personal data
- Access to any other supplementary information held about them
The purpose for granting access to data subjects is to enable them to verify the lawfulness of the processing of data held about them.
When a request to access images and information is received, the data subject is to be advised to complete the practice’s subject access request form. As of 25th May 2018, no fee can be charged for processing such requests. Data controllers must respond to all data subject access requests within one month of receiving the request (previous subject access requests had a response time of 40 days).
1.4 Third-party requests for access to images and information
Requests may be received from third parties to access images and information. Such instances include requests from solicitors to support either a claimant or defendant where a crime has been alleged. The data controller must be able to satisfy themselves that the person requesting the data has the authority of the data subject. The responsibility for providing the required authority rests with the third party and is usually in the form of a written statement or consent form, signed by the data subject.
1.5 Disposal of images and information
As stated in paragraph 5.3, images and information are stored for 11 days, after which they are deleted. The deletion process is:
- The system is set up for a rolling programme 11 days recording e.g. images recorded on 11/03/2018 will be deleted and recorded over on 22/03/2018.
Should a patient, visitor or contractor have cause to complain about the practice CCTV system, the data controller should be contacted. Patients, visitors and contractors are to be advised that complaints will be processed in accordance with Ards & Comber Vets’ complaints policy.