We have detected that you are using Internet Explorer to visit this website. Internet Explorer is now being phased out by Microsoft. As a result, NHS Digital no longer supports any version of Internet Explorer for our web-based products, as it involves considerable extra effort and expense, which cannot be justified from public funds. Some features on this site will not work. You should use a modern browser such as Edge, Chrome, Firefox, or Safari. If you have difficulty installing or accessing a different browser, contact your IT support team.
Closed circuit television (CCTV): GDPR information
Summary
Why and how we process your data in the Closed circuit television system (CCTV), and your rights.
| Controller | NHS Digital |
| How we use the information (processing activities) | Personal data is collected for the purpose of the prevention and detection of crime, investigation of security incidents and staff safety. |
| Does this contain sensitive (special category) data such as health information? | Yes |
| Who are recipients of this data? |
The data is locally stored in a secure ICT server room and can only be accessed by authorised individuals. CCTV data may be disclosed to HR where it is required for an investigation whereby a manager wants to clarify when a member of staff entered or left the building for timekeeping purposes under relevant conduct and disciplinary proceedings. |
| Is data transferred outside the UK? | No |
| How long the data is kept | 30 days maximum |
| Our lawful basis for holding this data | Public task |
| Your rights |
|
| How can you withdraw your consent? |
Consent not the basis for processing |
| Is the data subject to decisions made solely by computers? (automated decision making) | No |
| Where does this data come from? | CCTV cameras |
| The legal basis for collecting this data | Public task and Health and Social Care Act (2012) – Schedule 18, part 10 (1) |
