Personal Data, in DPA terms, includes any image from which an individual may be identified. The processing of personal data includes the recording, viewing, storage, and destruction of the personal data.
CCTV & WebCam type surveillance systems are operated for the purposes of safety, security, and detection of crime. Such operations are within the scope of the DPA where images are collected and/or displayed and/or stored for those purposes and where the image resolution is such that individuals may be identified. As the processing of personal data requires the consent of the individual, it is essential that visible warning signs [preferably incorporating an image of a CCTV camera] are provided so that people are aware they are entering an area covered by surveillance equipment.
CCTV & WebCam type surveillance systems that (a) do not record images, or (b) where individuals cannot be identified from the images, are outwith the scope of the DPA. It is not recommended that a CCTV type system that does not meet this criteria is identified as covered by the DPA as this could be considered as misleading and potentially in breach of the DPA.