Skip navigation to content


This information is largely culled from the Information Commissioner's CCTV Code of Practice.

Users of CCTV and similar surveillance equipment need to establish a legitimate purpose for processing personal data, in this case images of individuals. The equipment may be used for a number of different purposes - for example, prevention, investigation and detection of crime, apprehension and prosecution of offenders (including use of images as evidence in criminal proceedings), public and employee safety, monitoring security of premises etc.

If your unit uses CCTV you need to consider:

  • Is the system necessary to address a pressing need, such as public safety or crime prevention?
  • Is it proportionate to the problem it is designed to deal with?

Public authorities (of which the University is one) need also to consider the wider human rights issues, and in particular the implications of the European Convention of Human Rights, Article 8 (the right to respect for private and family life).

Letting people know

You must let people know that they are in an area where CCTV surveillance is being carried out.  The most effective way of doing this is by using prominently placed signs at the entrance to the CCTV zone and reinforcing this with further signs inside the area.

Signs should:

  • be clearly visible and readable
  • contain details of the organisation operating the system, the purpose for using it, and details of whom to contact about the system

Below is a sample CCTV warning notice. After "Operator:" you should fill in the name of the unit operating the scheme. For "Contact:" give a name or telephone number.





Data Protection Co-ordinator

IT Services
Butts Wynd Building St Andrews Fife
St Andrews
KY16 9AL
Scotland, United Kingdom

Tel: 01334 46 4010/2776