Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating...
-
Upload
kristian-lewis -
Category
Documents
-
view
216 -
download
3
Transcript of Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating...
![Page 1: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/1.jpg)
Designing Smart Cities ConferenceUniversity of Strathclyde, Glasgow
31st March 2015
“Regulating Smart Cities: Policing & Privacy”
Paul MackieChief Executive and Compliance Director
CameraWatch
![Page 2: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/2.jpg)
What is CameraWatch?What is CameraWatch?
• A UK surveillance compliance organisation
• An independent, not for profit company founded in February 2006 with the aim of raising awareness of CCTV Data Protection compliance issues and helping those connected with CCTV to improve compliance and standards
• Deals with all sectors with an interest in CCTV – installers, manufacturers, users, security companies, legal, law enforcement, government, data protection departments etc
• Fully supportive of CCTV when used correctly
![Page 3: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/3.jpg)
UK Data Protection Act 1998UK Data Protection Act 1998
![Page 4: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/4.jpg)
UK Data Protection Act 1998UK Data Protection Act 1998
![Page 5: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/5.jpg)
UK Data Protection Act 2001UK Data Protection Act 2001
![Page 6: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/6.jpg)
![Page 7: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/7.jpg)
![Page 8: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/8.jpg)
![Page 9: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/9.jpg)
![Page 10: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/10.jpg)
![Page 11: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/11.jpg)
![Page 12: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/12.jpg)
![Page 13: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/13.jpg)
![Page 14: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/14.jpg)
![Page 15: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/15.jpg)
![Page 16: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/16.jpg)
The Common Perception……The Common Perception……
![Page 17: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/17.jpg)
• “Over 90% of CCTV Systems observed in the UK by CameraWatch are currently not compliant”(CameraWatch 2006)
• “8 out of 10 images presented were not fit for purpose” (UK Home Office / ACPO Report 2007)
CCTV and the UK Data Protection Act
![Page 18: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/18.jpg)
System Audit Processes…
![Page 19: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/19.jpg)
Common sense data protection.…Common sense data protection.…
Does the CCTV system actually do what we think it does?
• Correct Purposes and Use of the CCTV System• Siting of the Cameras• Signs – Content and Placement• Quality and Authenticity of Images• Access to - and Management of - Images• Security of Data (Images) and Equipment• Training for those involved in CCTV • Procedures• Documentation
![Page 20: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/20.jpg)
Purposes of the SystemPurposes of the System
• Is there a need / justification for using CCTV
• Decide the purposes of the system and register them
• Registration Updates / Changes
• Is the system being used for the correct purposes
• Is the system proportionate
• Regular Reviews and Justification
![Page 21: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/21.jpg)
Siting of the CamerasSiting of the Cameras
• Do the cameras only monitor what should be monitored
• If workers are monitored are they aware
• Is there a regular review of camera positions and indeed requirement
• Are cameras protected from vandalism
• Covert / Overt
![Page 22: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/22.jpg)
SignageSignage
• There are clear and specific legal requirements for signage
• Awareness of those whose images are captured – transparency and openness
• Visible and readable
• Correctly worded and sited
![Page 23: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/23.jpg)
![Page 24: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/24.jpg)
![Page 25: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/25.jpg)
![Page 26: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/26.jpg)
![Page 27: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/27.jpg)
![Page 28: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/28.jpg)
Image Quality and AccuracyImage Quality and Accuracy
The system properly & regularly maintained
• A regular check of recorded images must be carried out
• The system produces quality images
• Quality, Process and Storage of Images / Personal Data / Personal Information
• Retention
• Maintenance
![Page 29: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/29.jpg)
Access to ImagesAccess to Images
• All access to the recording medium documented
• Access to images and recording equipment restricted and documented
• Staff with responsibility must be fully aware of legal procedures
• Subject Access Requests
• Disclosure
![Page 30: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/30.jpg)
Security of Data (Images) and Security of Data (Images) and EquipmentEquipment
• Is recording device totally secure
• Persons must be fully trained for reviewing data (images)
• Reviewing of data carried out in a secure and limited access area
• Signed agreements regarding data processors
Are recorded images always secure
Is data shared with third parties
“The Cloud”
![Page 31: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/31.jpg)
TrainingTraining
All appropriate staff must be trained in the legal issues of CCTV
Correct action for requests of images by the public
• Staff recognise requests to prevent processing of images
• Legal Requirement for Training
• ICO Code of Practice
• Correct SIA Licence requirement
![Page 32: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/32.jpg)
ProceduresProcedures
• Accountability for the system
• Evidence copying
• Image retention
• Organisation and site-specific procedures
• Regular audit of system
• Procedures for all aspects of the management of the CCTV data
![Page 33: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/33.jpg)
DocumentationDocumentation
All aspects of the management of the CCTV system must be documented to allow a full audit trail of the lifecycle of the personal information (CCTV images) captured.
Organisation-level and site-specific documentation
Codes of Practice
Attendance Logs
Hardware Logs
Request for Information forms and information
Maintenance and good practice operating logs
Data movement forms
Third party agreements
![Page 34: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/34.jpg)
Just because the technology is there to do it, it doesn’t mean that it has to
be done.
Justify it and make it transparent – that way the public will support it.
![Page 35: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/35.jpg)
Ensure that your CCTV system does what it should do
……No More..….No Less…...and LEGALLY.
Comply with the law.
Paul MackieChief Executive and Compliance Director
www.camerawatch.org.uk
![Page 36: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/36.jpg)
Common sense data protection.…Common sense data protection.…
Does the system actually do what we think it does?
• Correct Purposes and Use of the CCTV System• Siting of the Cameras• Signs – Content and Placement• Quality and Authenticity of Images• Access to - and Management of Images• Security of Data (Images) and Equipment• Training for those involved in CCTV • Procedures• Documentation
![Page 37: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/37.jpg)
Common sense data protection.…Common sense data protection.…
......covers the 12 Guiding Principles of the Surveillance Camera Code of Practice and more….
• Correct Purposes and Use of the CCTV System P1, P2• Siting of the Cameras P2• Signs – Content and Placement P3• Quality and Authenticity of Images P6, P11, P12• Access to - and Management of Images P4, P7, P9• Security of Data (Images) and Equipment P9, P11• Training for those involved in CCTV P8• Procedures P2, P3, P5, P10• Documentation P2, P3, P10
![Page 38: Designing Smart Cities Conference University of Strathclyde, Glasgow 31 st March 2015 “Regulating Smart Cities: Policing & Privacy” Paul Mackie Chief Executive.](https://reader035.fdocuments.in/reader035/viewer/2022070407/56649e4a5503460f94b3e0a1/html5/thumbnails/38.jpg)
The Differences…….The Differences…….
• Data Protection is a UK law – not just covering England and Wales
• Data Protection covers all but domestic CCTV systems – the new code covers only local authorities and police authorities – a reported 3% to 4% of the CCTV systems users in the UK