Attending council meetings CCTV
Why we collect information about you?
In order to maintain safety and security of councillors, staff and the general public we have CCTV in the council chamber including in the vicinity of the public gallery which will collect images and record audio. We will also collect a register of all members of the public attending council meetings for the security and safety of everyone.
Information we collect
The data that we process is footage showing employees, councillors, visitors and members of the public which is captured by our CCTV cameras and stored on our systems.
Some more sensitive information, known as special category data, may also be processed passively if the footage collected reveals an individual’s ethnic or racial origin, or data concerning their health (for instance, if they have a visible disability).
Where there is a security incident, some criminal offence data may also be processed.
As part of the registration process we will also collect personal details including names and contact details: phone number and/or email.
Processing personal data
The information collected will be only be processed for one or more of the following purposes:
- protecting the health and safety of employees, councillors and visitors to sites
- preventing and detecting crime or criminal activity, and protecting our buildings and assets from damage, disruption, vandalism or other criminal activity
- creating a safer environment and providing reassurance to employees, councillors and the general public
- countering terrorism
- assisting with investigations, where appropriate
- assisting in the effective resolution of any disputes or legal or insurance-related claim involving ourselves
It will not be processed for any other purpose. The legal basis for processing is:
- GDPR article 6(1)(e): processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Where special category data is processed, the legal basis is:
- article 9(2)(g): processing is necessary for reasons of substantial public interest.
The relevant basis in UK law is set out in section 10(3) of the DPA 2018. This means that we're required to meet one of the 23 specific substantial public interest conditions set out in Schedule 1. The substantial public interest condition is one or more of the following:
- Sch 1 para 7: Administration of justice
- Sch 1 para 10: Preventing or detecting unlawful acts
- Sch 1 para 11: Protecting the public
- Sch 1 para 20: Insurance
Where personal data relating to criminal allegations or offences is processed, this will be carried out only where authorised under UK law in compliance with GDPR Article 10 and will meet one or more of the following conditions set out Schedule 1, Part 3 of the Data Protection Act 2018:
- Sch 1 para 33: Legal Claims
- Sch 1 para 36: Substantial Public Interest
- Sch 1 para 37: Insurance Claims
Who do we share this information with?
There is no planned regular or scheduled sharing of CCTV footage or the register of attendance with any external organisation. However, in the event of a security incident or suspected security incident, information may be shared with third party organisations such as the police or insurance companies.
Information may be shared with an individual in response to a subject access request. Where a subject access request is made, efforts will be made to seek the consent to disclosure of images of any other individuals captured in the footage, and where this is not possible, consideration will be given as to whether or not it is reasonable to share the information without their consent.
The information provided will not be used for marketing purposes.
Is there any information transferred to or stored on servers based outside the EEA?
No.
Data security
Images captured on cameras within the Municipal Officers are transmitted to and recorded on hardware hosted within our infrastructure and as a result will be subject to appropriate security protocols.
Access to the footage is restricted to trained personnel only.
The register of attendance will be held by our democratic services team.
How long do we keep your information?
CCTV will be overwritten after five months. However, this may be kept longer if used as evidence and shared with Police. The register of attendees will be kept for a period of three months from the date of the meeting.
Your rights
Should you wish to raise any concerns about how we have processed your personal data you can contact the data protection officer, please email [email protected]