According to the Data Protection Act, personal data includes any image from which an individual may be identified. The processing of personal data includes the recording, viewing, storage, and destruction of the personal data.
CCTV & WebCam surveillance systems are operated for the purposes of safety, security, and detection of crime. Such operations are within the scope of the DPA, where images are collected and/or displayed and/or stored for those purposes, and where the image resolution is such that individuals may be identified. As the processing of personal data requires the consent of the individual, it is essential that visible warning signs (preferably incorporating an image of a CCTV camera) are provided so that people are aware they are entering an area covered by surveillance equipment.
CCTV & WebCam surveillance systems that do not record images, or where individuals cannot be identified from the images are outwith the scope of the DPA. It is not recommended that a CCTV type system that does not meet this criteria is identified as covered by the DPA, as this could be considered as misleading and potentially in breach of the DPA.
You can request a copy of any CCTV footage containing your image. To receive this footage, you must make a CCTV Subject Access Request to the Data Protection & FOI Office.