Video surveillance system installed in a public place or a place open to the public

Purposes (11)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

1

Protection of public buildings and installations and their surroundings

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

2

Recording of traffic violations

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

3

Preventing threats to the safety of people and property

Prevention of harm to people and property in places particularly exposed to the risk of assault, theft or drug trafficking, and support to the prevention and detection of customs and excise offences in areas particularly exposed to them.

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

4

Compliance with the obligation to be covered by insurance guaranteeing civil liability

Checking compliance with the obligation to hold motor insurance covering third-party liability (Road Traffic Act 1988, s.143). In the UK this is carried out by the police, typically with ANPR, and falls under Part 3 of the Data Protection Act 2018 (law enforcement processing) rather than the UK GDPR.

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

5

Ensuring the protection of the immediate surroundings of retailers' buildings and facilities

Ensuring the protection of the immediate surroundings of retailers' buildings and facilities located in areas particularly exposed to the risk of assault or theft

Legitimate interest

UK GDPR Art. 6(1)(f): the operator's legitimate interest in protecting people, premises and property, subject to a documented legitimate interests assessment and to the Information Commission (ICO) guidance on video surveillance. Public authorities operating the same system should rely on Art. 6(1)(e) and must have regard to the Surveillance Camera Code of Practice (Protection of Freedoms Act 2012).

6

Transport flow regulation

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

7

Prevention of natural or technological risks

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

8

Safety of public facilities in amusement parks

Legitimate interest

UK GDPR Art. 6(1)(f): the operator's legitimate interest in protecting people, premises and property, subject to a documented legitimate interests assessment and to the Information Commission (ICO) guidance on video surveillance. Public authorities operating the same system should rely on Art. 6(1)(e) and must have regard to the Surveillance Camera Code of Practice (Protection of Freedoms Act 2012).

9

Ensure the safety of goods and people

Ensure the safety of people and property in places and establishments open to the public, when these places and establishments are particularly exposed to risks of assault or theft.

Legitimate interest

UK GDPR Art. 6(1)(f): the operator's legitimate interest in protecting people, premises and property, subject to a documented legitimate interests assessment and to the Information Commission (ICO) guidance on video surveillance. Public authorities operating the same system should rely on Art. 6(1)(e) and must have regard to the Surveillance Camera Code of Practice (Protection of Freedoms Act 2012).

10

Prevention of acts of terrorism

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

11

Safeguarding national defence installations

Public interest

The processing is necessary for the performance of a task carried out in the public interest, namely ensuring public safety, crime prevention, and the protection of persons and property through the operation of a video surveillance system in accordance with the Surveillance Camera Code of Practice (PoFA 2012) and the UK GDPR.

Data categories (2)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Video

Data details

Video recordingsrequired

Data conservation rules

Active base:

No statutory retention period applies in the UK. Footage should be kept only as long as necessary for the purpose and not according to storage capacity; the controller should set a short period (for example 30 days) and document it. Footage needed for an incident, an investigation or legal proceedings is extracted and kept until the matter is closed.

Destruction

Video surveillance data

Data details

Genderrequired

Photograph

required

Data conservation rules

Active base:

No statutory retention period applies in the UK. Footage should be kept only as long as necessary for the purpose and not according to storage capacity; the controller should set a short period (for example 30 days) and document it. Footage needed for an incident, an investigation or legal proceedings is extracted and kept until the matter is closed.

UK GDPR Art. 5(1)(e) (storage limitation); Information Commission (ICO) guidance on video surveillance (including CCTV); Surveillance Camera Code of Practice for relevant authorities (Protection of Freedoms Act 2012).

Destruction

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Citizens

GDPR Data processing modelVideo surveillance system installed in a public place or a place open to the public

Purposes (11)

Data categories (2)

Video

Video surveillance data

Data subject (1)