The goal of this practical sub-module is to make it easier for SMEs to create a Video surveillance Policy.
The Video surveillance policy is an internal act that prescribes the processing of personal data through video surveillance in a business entity. It is necessary to establish and define:
- Is there a legal basis and purpose for setting up a video surveillance system
- Are certain persons authorized to access and/or process data in the video surveillance system
- Are signs placed that the area is under video surveillance
- Do the signs contain all the necessary information
- Are respondents provided with all the necessary information regarding the processing of personal data through video surveillance
- Is there a prescribed storage time for recordings
- Are the services of a processor used (video surveillance system service) and if yes, are the rights and obligations of the processor defined in the contract and have the authorized persons of the processor signed Statements on confidentiality
- Do the camera recordings cover only the space that is owned by the business entity, i.e. that is leased/rented by the entity
- Are the employees adequately informed that video surveillance has been established in the workplace rooms
- Are the cameras set so that they do not record the rooms for rest, personal hygiene and changing
- Are there usernames and passwords set on the recorders for authorized persons only
- Are the recorders placed in appropriate office furniture and/or locked rooms to which only authorized persons have the right to access
- Is an automated system of records established to record access to video surveillance recordings (logs) that will contain the time and place of access , as well as the designation of the persons who accessed the data collected through video surveillance.
