Caroline,
For what it's worth-
The OIC Code of Practice on CCTV says that on SAR's for CCTV that:
"Data subjects should be provided with a standard subject access request form which:
a) Indicates the information required in order to locate the images requested.
For example - an individual may have to provide dates and times of when they visited the premises of the user of the equipment.
b) Indicates the information required in order to identify the person making the request.
For example -if the individual making the request is unknown to the user of the equipment, a photograph of the individual may be requested in order to locate the correct image.
c) Indicates the fee that will be charged for carrying out the search for the images requested. A maximum of £10.00 may be charged for the search.
d) Asks whether the individual would be satisfied with merely viewing the images recorded.
e) Indicates that the response will be provided promptly and in any event within 40 days of receiving the required fee and information.
f) Explains the rights provided by the l998 Act.
3. Individuals should also be provided with a leaflet which describes the types images which are recorded and retained, the purposes for which those images are recorded and retained, and information about the disclosure policy in relation to those images (Sixth Data Protection Principle).
4. This should be provided at the time that the standard subject access request form is provided to an individual (Sixth Data Protection Principle).
H
ope this helps?!
Peter
Peter Wilson
Data Protection Officer
University of Paisley
>>> Caroline Lamb <[log in to unmask]> 10/30/01 12:03pm >>>
We have now had our first SAR from a student who wants every bit of data we
hold (joy). He has also kindly sent us a fairly blurred 'photo, which he
expects us to use to identify images of him from CCTV footage and then
supply him with copies. The effort involved in this would be huge and the
accuracy questionable! Also we only keep tapes for 7 days (unless an
incident is reported) so what dates should we be looking at???
Do we really have to do this???
Would really appreciate any guidance from members of the list!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Legal disclaimer
--------------------------
The information transmitted is the property of the University of Paisley and is intended only for the person or entity
to which it is addressed and may contain confidential and/or privileged material. Statements and opinions expressed in this
e-mail may not represent those of the company. Any review, retransmission, dissemination and other use of, or taking
of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited.
If you received this in error, please contact the sender immediately and delete the material from any computer.
--------------------------
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at : -
www.jiscmail.ac.uk/user-manual/summary-user-commands.htm
all commands go to [log in to unmask] not the list please!
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
