Understanding your obligations and the best practices in redaction and GDPR compliance is crucial to protecting both the privacy of individuals and the integrity of your business.
What is a DSAR?
A Data Subject Access Request (DSAR) is a request made by an individual to access personal data collected about them by an organisation. Under GDPR individuals have the right to access their personal data and receive a copy of this data.
Handling CCTV Footage in DSARs
When you receive a DSAR that involves CCTV footage, it is vital to approach the task with care. CCTV footage often contains images or information about multiple people, which complicates the task of fulfilling a DSAR. Here’s what you should know:
Identify Relevant Footage: First, determine whether the CCTV footage contains data related to the individual making the DSAR. This involves locating footage where the individual is visible or can be identified.
Consider the Scope of the Request: Individuals are entitled to access their data, not information about others caught on CCTV. This is where redaction plays a key role.
The Importance of Redaction
Redaction is the process of obscuring or removing portions of video or images to protect the privacy of individuals who are not the subject of the DSAR. Here’s why it’s crucial:
Privacy Protection: Redaction safeguards the privacy of third parties captured in the footage.
Compliance with GDPR: GDPR mandates that any personal data shared must be done in a manner that respects other individuals’ data rights. Redaction helps ensure compliance by only exposing the data relevant to the requester.
Best Practices in Video Redaction
At Datascan Redaction Services, we ensure best practices are used on your footage:
Advanced Software: Employing advanced redaction software ensures that the redaction is accurate and efficient. Our software can detect faces and other identifiable features, automatically obscuring them.
Manual Review and Verification: Even with advanced technology, a manual review is crucial to ensure no identifiable information is accidentally disclosed. Our expert team look after this.
Maintain Quality and Integrity of Footage: We ensure that the redaction process does not degrade the quality of the footage so that it remains a usable piece of evidence if required.
Security of Data: We ensure your data is secure at all stages when in our possession. We are certified to ISO27001 for your peace of mind.
GDPR Compliance and Providing Footage
When providing CCTV footage in response to a DSAR, consider the following to ensure GDPR compliance:
Timely Response: GDPR requires that requests be responded to without undue delay and in any event within one month of receipt of the request.
Secure Transmission: When transmitting the redacted footage, use secure methods to prevent unauthorised access.
Keep a Record: Document all actions taken during the redaction process. This documentation can be vital in demonstrating compliance if your actions are ever questioned.
Handling a DSAR involving CCTV footage is a challenging but manageable task with the right tools and approaches. At Datascan Redaction Services, we provide a quality cost effective service that can help you navigate the complexities of DSARs while ensuring full compliance with GDPR. Speak with our friendly team today for more information.
Stay In Touch