Self assessment tool
How well does your organisation comply with the 12 guiding
principles of the surveillance camera code of practice? Complete
this easy to use self assessment tool to find out if you do.
Using this tool
This self assessment tool will help you and your organisation identify if you’re complying
with the principles in the code. It should be completed in conjunction with the
surveillance camera code of practice. The tool will help you show how well you comply
with each principle. It is possible to be largely compliant with some principles and to fall
short against others. As a result you will note that at the end of the questions against
each principle there is a space to include an action plan. This is to enable you to put
actions in place over the next year to improve your compliance to that principle. These
boxes can also be used to make a note of what evidence you could produce if required
to show your compliance to that principle.
The document contains a combination of open and closed questions. For the open
questions there is a limit on how much you can write, so please feel free to include any
additional notes as an annex to the document – there are additional blank pages at the
end of the tool.
We do not want you to send the self assessment response to us. However, in the interest
of transparency we encourage you to publish the self assessment on your website.
The self assessment is for you to satisfy yourself and those that you surveille that you
meet the principles and identify any additional work to show compliance.
We would like you to let us know that you have completed this document as this will
enable us to understand the level of uptake. Also please let us know if you will be
interested in working towards certification against the surveillance camera code of
practice in the near future or just be added to our mailing list.
This is the first edition of the self assessment tool which will evolve over time.
Please forward any feedback to scc@sccommissioner.gsi.gov.uk
Principle 1
Use of a surveillance camera system must always be for a specified purpose which is in pursuit of a
legitimate aim and necessary to meet an identified pressing need.
1.
Have you translated principle 1 into clear objectives?
Yes No
If so what are they?
2. Do you regularly review the system and assess against the objectives?
Yes No
3.
Have you considered the requirement of the end user?
Yes No
4.
Is the system being used for any other purpose other than those specified?
Yes No
If so please explain
5. Have you identified any areas where further action is required more fully conform with the
requirements of Principle 1?
Action plan
North Devon Council operates public space CCTV camera monitoring service within Barnstaple
Town Centre and adjacent locations to prevent, deter and detect crimes and to improve public
safety and reassurance.
No
No
Click here to reset form
Principle 2
The use of a surveillance camera system must take into account its effect on individuals and their
privacy, with regular reviews to ensure its use remains justified.
1.
Do you review your system annually?
Yes No
2.
Have you conducted a privacy impact assessment?
(The ICO has produced a PIA code of practice and the SCC has a template you
can use if required)
Yes No
3.
Do you publish your privacy impact assessment and annual review?
Yes No
4.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 2?
Action plan
Principle 3
There must be as much transparency in the use of a surveillance camera system as possible, including
a published contact point for access to information and complaints.
1.
Does signage exist highlighting the use of surveillance cameras?
Yes No
2.
Does the signage highlight the point of contact?
Yes No
3.
Has there been proportionate consultation and engagement with the public and
partners to establish that there is a legitimate aim and a pressing need for the
surveillance camera system?
Yes No
4.
Is the surveillance system a proportionate response?
Yes No
To publish the annual review and privacy impact assessment.
5. Does your publication of information include the procedures and safeguards that
are in place, impact assessments undertaken, performance statistics and other
management information?
Yes No
6.
Do you have a complaints procedure in place?
Yes No
7.
Do you make the public aware of how to escalate complaints?
Yes No
8.
Is there a defined time scale for acknowledging and responding to complaints
and is this conveyed to the complainant at the outset?
Yes No
9.
Do you publish the number and nature of complains received?
Yes No
10.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 3?
Action plan
Principle 4
There must be clear responsibility and accountability for all surveillance camera system activities
including images and information collected, held and used.
1.
What arrangements are in place to provide clear responsibility and accountability?
To improve the publication of information more fully on North Devon Council Website including
statistics, Codes of practice and other relevant materials.
Structure- The service structure clearly sets out levels of responsibility
Communication- The organisations aims and values are clearly communicated to all staff at every level and are
reviewed through performance appraisals team briefings and emails
Training-All staff are trained in all aspects of their job, including compliance
Codes of Practice/ Manuals - detailed documents covering all aspects of job
Audits -regular audits undertaken to check compliance
2. Are all staff aware of their responsibilities?
Yes No
3.
Please explain how you ensure the lines of responsibility are adhered to.
4. If jointly owned, is it clear what each partner organisation is responsible for and
what the individual obligations are?
Yes No
5.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 4?
Action plan
Principle 5
Clear rules, policies and procedures must be in place before a surveillance camera system is used,
and these must be communicated to all who need to comply with them.
1.
Do you have clear policies and procedures which help ensure that any legal
obligations affecting the use of such a system are addressed?
Yes No
If so please specify.
Structure- The service structure clearly sets out levels of responsibility
Communication- The organisations aims and values are clearly communicated with all staff at every level and are
reviewed through performance appraisals, team briefings emails etc
Training-All staff are trained in all aspects of their job, including compliance
Codes of Practice/ Manuals/ SOP's - detailed documents covering all aspects of job
Audits -regular audits undertaken to check compliance
No
Codes of Practice/ Manuals - detailed documents covering all aspects of job
Communication- The organizations aims and values are clearly communicated with all staff at every
level and are reviewed through performance appraisals and team briefings, and through literature
Training-All staff are trained in all aspects of their job, including compliance
Audits -regular audits undertaken to check compliance
2. Do you follow a quality management system?
Yes No
If so please specify.
3. Are the rules, policies and procedures part of an induction process for all staff?
Yes No
4.
How do you ensure that all system users remain up to date and efficient with relevant operational,
technical, privacy considerations, policies and procedures?
5. Have you considered qualifications relevant to the role of the system users, such
as the National Occupational Standard for CCTV operations or other similar?
Yes No
6.
If so, have any of your system users undertaken any occupational standards to date?
Yes No
7. Do your system users require SIA licenses?
(Please see SIA website: www.sia.homeoffice.gov.uk)
Yes No
8.
If staff do not need a license, how do you ensure they have the necessary skills and knowledge to
use or manage the surveillance system?
9. Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 5?
Action plan
North Devon Council is compliant with relevant legislation including the Data Protection Act 1998 (DPA), the
Human Rights Act 1998 (HRA) and the Freedom of Information Act 2000. The system is operated and
managed in a manner that ensures fairness, purpose and responsibility. This covers all aspects of the service
including data that might be offered as evidence, data received, stored, reviewed or analysed.
Regular audits are undertaken to ensure that the system remains fully compliant
No
Principle 6
No more images and information should be stored than that which is strictly required for the stated
purpose of a surveillance camera system, and such images and information should be deleted once
their purposes have been discharged.
1.
On what basis are images retained and for how long?
2. Do you have an auditable process for reviewing images and managing
their retention?
Yes No
3.
Are there any time constraints in the event of the enforcement agency not taking
advantage of the opportunity to view the retained images?
Yes No
4.
Are there any time constraints which might affect external parties from viewing
the images?
Yes No
5.
Do you quarantine all relevant information and images relating to a reported
incident until such time as the incident is resolved and/or all the information and
images have been passed on to official third parties?
Yes No
6.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 6?
Action plan
Images are retained where an incident has occurred (e.g. crime or RTA), in such cases images
are retained for a period of 7 years, otherwise footage remains on the system for a period of 31
days after which it is automatically destroyed.
No
Principle 7
Access to retained images and information should be restricted and there must be clearly defined
rules on who can gain access and for what purpose such access is granted; the disclosure of
images and information should only take place when it is necessary for such a purpose or for law
enforcement purposes.
1.
Do you have a policy on who has access to the stored information?
Yes No
2.
Do you have a policy on disclosure of information?
Yes No
3.
What checks do you have in place to ensure that the disclosure policy is followed?
4. Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 7?
Action plan
Regular audits
No
Principle 8
Surveillance camera system operators should consider any approved operational, technical
and competency standards relevant to a system and its purpose and work to meet and maintain
those standards.
1.
What approved operational, technical and competency standards relevant to a surveillance system
and its purpose does your system meet?
2. How do you ensure that these standards are followed appropriately?
3. What steps are in place to secure certification against the approved standards?
4. Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 8?
Action plan
Whilst the service strives to achieve the highest level of operational performance standards, it is
not certified.
Our contractors are required to ensure that these standards are achieved in all aspects of works
undertaken.
The service continues to deliver at the highest levels of performance standards, however
certification is not required and is not being considered at the present time.
Contracts need to be tightened up with contractors to ensure that standards are being met.
Principle 9
Surveillance camera system images and information should be subject to appropriate security
measures to safeguard against unauthorised access and use.
1.
What security safeguards do you have in place to ensure the integrity of images and information?
2. If the system is connected across an organizational network or intranet, do
sufficient controls and safeguards exist?
Yes No
3.
What is the specified purpose for which the information are being used and accessed and is this
consistent with the stated purposes?
4. Do you have preventative measures in place to guard against misuse of
information and images?
Yes No
5.
Are your procedures and instructions and/or guidelines regarding the storage,
use and access of surveillance system information documented?
Yes No
6.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 9?
Action plan
The building is access controlled, access to the system is restricted with management levels
controlled by a single manager. The software does no allow access to alter or delete data
Yes, individuals request footage through subject access requests, and third parties - Police,
insurers etc. request information to investigate crimes. All requests are managed in line with
legislation and codes of practice.
No
Principle 10
There should be effective review and audit mechanisms to ensure legal requirements, policies and
standards are complied with in practice, and regular reports should be published.
1.
Does your system have a review process that shows it still addresses the needs
and delivers the benefits that justify its use?
Yes No
2.
Have you identified any cameras that do not remain justified in meeting the
stated purpose(s)?
Yes No
3.
Have you conducted an evaluation in order to compare alternative interventions
to surveillance cameras?
Yes No
If so please provide brief details.
4. Is it cost effective to continue running your surveillance camera system?
Yes No
5.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 10?
Action plan
Such alternative measures were considered prior to cameras being installed to ensure that the
deployment of a camera is proportionate to the issue it is required to address. Where street
lighting or other measures was considered to be more proportionate a camera was not installed.
On-going operational use is reviewed annually. Where a camera is no longer required to
address crime, disorder, ASB or public reassurance it is removed.
To provide better reports and to improve the publication of information more fully on North
Devon Council Website including statistics, Codes of practice and other relevant materials.
Principle 11
When the use of a surveillance camera system is in pursuit of a legitimate aim, and there is a pressing
need for its use, it should then be used in the most effective way to support public safety and law
enforcement with the aim of processing images and information of evidential value.
1.
Are the images and information produced by your system of a suitable quality
for the criminal justice system to use without enhancement?
Yes No
2.
During the production of the operational requirement for your system, what stakeholder
engagement was carried out or guidance followed to ensure exported data would meet the quality
required for it to be used for evidential purposes?
3. Do you have safeguards in place to ensure the forensic integrity of the images
and information including a complete audit trail?
Yes No
4.
Do you have a policy on data storage, security and deletion?
Yes No
5.
Is the information stored in a format that is easily exportable?
Yes No
6.
Does the storage ensure the integrity and quality of original recording and the
meta data?
Yes No
7.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 11?
Action plan
Consultation with Devon and Cornwall Police to ensure that the quality and production of
evidence meets required standards and operational use.
No
Principle 12
Any information used to support a surveillance camera system which compares against a reference
database for matching purposes should be accurate and kept up to date.
1.
Do you use any specialist technology such as ANPR, facial recognition,
Body Worn Video (BWV) or remotely operated vehicles (Drones)?
Yes No
If so, please specify.
2. Do you have a policy in place to ensure that the information contained on your
database is accurate and up to date?
Yes No
3.
Do you have a procedure for deciding when and whether an individual or vehicle
should be included in a reference database?
Yes No
4.
What policies are in place to determine how long information remains in the reference database?
5. Are all staff aware of when surveillance becomes covert surveillance under the
Regulation of Investigatory Powers Act (RIPA) 2000?
Yes No
6.
Have you identified any areas where further action is required to more fully conform with the
requirements of Principle 12?
Action plan
No
Additional Information
Additional Information
Additional Information