CCTV footage policy.
How we advise clients to handle CCTV footage: who may view it, how long it's kept, and how to notify visitors to the site.
Last updated: August 2026.
Who this policy is for
This page explains the principles we recommend to every client with an installed CCTV system, and that we apply ourselves in our own monitoring centre. It isn't legal advice — for a binding reading of data protection law, consult a lawyer.
Notice at the entrance
Every site under CCTV should carry a visible notice at the entrance, naming the controller and a contact for questions. This is the basic condition for lawful recording in a publicly accessible space.
Who may view footage
We grant archive access only through named accounts set by the client. Every viewing is logged — who watched, when, and which recording — which protects both the client and the people on camera.
How long footage is kept
The retention period should match the purpose of recording, not disk capacity. We recommend the client write that period into an internal CCTV policy and not extend it without reason.
Handing footage to third parties
Footage is handed to police, a court or an insurer only on a formal request, with a record of who received it and when.
Our role
We design and install the system and, where a monitoring contract exists, store and hand over footage under the agreed rules. Data handling in our centre follows ISO 27001 processes.