One of the perennial challenges for the busy DPO is the use of CCTV. As soon as you put up cameras for whatever purpose, you’re processing personal data and often, a lot of information that you don’t want or need to see. Just ask former Secretary of State for Health Matt Hancock.

The questions multiply: when can we use CCTV and for what purpose? Can we use it in secret? (SPOILER ALERT: probably not) As supermarkets across the land start to install it, what are the implications of using facial recognition? And what happens if someone makes a subject access request for CCTV data? Does GDPR apply, or is it the DPA?

One positive thing I can say is that I can answer all of these questions and more. On Eyes Down: CCTV + GDPR Essentials, I will cover all the practical issues and challenges in a pragmatic and entertaining way. Cameras are probably here to stay, so how do you deal with the all-seeing electronic eye?

Course includes:

• How to justify the use of CCTV – public task, legitimate interest

• Implications of GDPR and Human Rights Privacy

• Capturing / inferring special categories data

• Cameras in private places

• Using facial recognition, including the South Wales Police court case and the Serco enforcement

• Key privacy cases including the Peck case on public space surveillance 

• Carrying out an impact assessment on a new or changing deployment of cameras

• Dealing with subject access requests for CCTV images including the ICO’s recent reprimand on Greater Manchester Police

• Requests for disclosure from the police and others

• What happens if your customers or tenants have CCTV systems