This policy describes how we comply with data protection legislation requirements in our use of CCTV.

Ownership and operation of CCTV

Mihail Drug Ionescu, the Data Protection Officer (DPO), has overall responsibility for CCTV at the practice and the images produced.

The DPO is responsible for installing and maintaining the CCTV equipment and storing the images produced. It processes information on behalf of Mihail Drug Ionescu who is ultimately responsible for the information obtained from CCTV use at the practice.

The CCTV is operational 24 hours seven days per week.

Purpose of CCTV

We use CCTV recording to:

  • Protect the practice premises and property
  • Increase the safety of practice patients, staff and visitors
  • Deter criminal activity and anti-social behaviour
  • Assist in the apprehension, identification and prosecution of offenders
  • Provide evidence to a court or tribunal
  • Comply with a legal obligation

Location of CCTV

CCTV cameras at the practice cover the following areas:

  • Reception corridor. The camera points towards the reception main area.
  • Ground floor corridor first waiting area. – oversees the waiting area and the step
  • Ground floor corridor second waiting area – oversees the waiting area and exit door
  • Upstairs main waiting area – two cameras one either side of the beam overseeing the waiting area
  • Decontamination room – oversees the decontamination work area
  • Ground floor garden exit – oversees the back door and office doors
  • Stock room

The CCTV does have audio recording capability but for privacy reasons it will not be used.

The CCTV monitors (screens) are located in the office and on smartphones of the business owner (Data Controller) and Practice manager. The recordings will be accessed via the app using a password on a password protected device only.

Use of CCTV recordings

CCTV images and recordings are personal information and, when using or processing the information, we will respect the legal rights of the individuals shown in the recordings.

We will not share images or recordings except in the following circumstances:

  • If requested by the local authority, police or courts for the investigation, prevention or prosecution of anti-social behaviour or criminal activity
  • For bringing or defending a legal claim
  • To comply with a police warrant or an order given by a court or tribunal

Access to the CCTV monitors and/or recorded images, for the purposes listed above, is restricted to Mihail Drug Ionescu (DPO) Roxana Drug Ionescu the (Data Controller) the business owner and the practice manager.

The CCTV equipment will be checked regularly to ensure that it is in good working order and images recorded are of a sufficient quality to be used for the purposes listed.

CCTV images and recordings will be kept for 30 days unless they are being used in the investigation of an incident (for example theft, damage or violence). After this time or following the conclusion of an investigation, the recordings will be destroyed and/or irretrievably deleted.

Requests for CCTV recordings

Requests by individuals for recordings of themselves are will be processed in line with the practice policy on access to information.

Requests by third parties (such as law enforcement agencies or lawyers) for practice CCTV recordings should be submitted in writing to the Data Protection Officer, Mihail Drug Ionescu. The Data Protection Officer will then:

  1. Verifies the identity of the person / organisation and takes a copy of any identification documents, if required.
  2. Decides whether providing the CCTV recording would satisfy one or more of the purposes listed in this policy.
  3. Considers the rights of the individuals shown in the CCTV, and balances the protection of these rights against the reasons for the request. Some images may require editing to protect the privacy of individuals.
  4. If appropriate, transfers the requested CCTV recordings / images securely to the third party.
  5. Keeps a record of the disclosures of CCTV to the third party.

If unsure about providing the requested information to a third party, the Dental Protection Officer should seek advice from the Information Commissioner’s Office (ICO).

Review

This policy will be reviewed at least every 2 years as stated in the attached checklist.

Complaints

Any concerns or complaints about this policy should be raised with the Data Protection Officer. If the concerns cannot be resolved, the practice may seek advice from the ICO.