Closed Circuit Television (CCTV)

In order to comply with the UK General Data Protection Regulation (UK GDPR), where personal data relating to a data subject is collected, Lancashire County Council would like to provide you with the following details.

Identity and contact details of the data controller

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Contact details of the data protection officer

Our Data Protection Officer is Paul Bond. You can contact him at dpo@lancashire.gov.uk or Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ

Purposes for processing

Lancashire County Council uses CCTV cameras and the footage gathered from these cameras for the following purposes,

Protecting areas and premises used by council officers and the public.
Deterring and detecting crime and anti-social behaviour.
Assisting in the identification of and apprehension of offenders.
Deterring violent or aggressive behaviour towards council officers.
On-site traffic and car park management.
Monitoring traffic movement.
Identifying those who have contravened parking regulations.
Assisting in traffic regulation enforcement.
Protecting council property and assets.
Assisting in grievances, formal complaints and investigations.
Surveying buildings for the purpose of maintenance and repair.

On occasions where the Regulation of Investigatory Powers Act (RIPA) (2000) applies, this may include targeted footage of private property. Where this is the case Lancashire County Council will always do so in compliance with this act and Codes of Practice issued pursuant to this legislation.

On occasion, police officers may request to view images taken from CCTV systems during the investigation of criminal activity. This is acceptable under the Data Protection Act 2018 (Section 15) and Lancashire County Council may share footage with police officers in accordance with legislative requirements.

On occasion, insurance companies or solicitors will request footage, generally over disputes regarding damage to cars in car parks. CCTV footage is shared for this purpose, though all such requests are processed in accordance with legislative requirements.

Category of personal data being processed

Personal data (information relating to a living, identifiable individual)
Special category personal data (racial, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation)

Legal basis for processing personal data

The legal basis for processing your personal data, in accordance with the UK GDPR is:

(d) Vital Interests: the processing is necessary to protect someone's life.

(e) Public Task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law. You must reference the applicable task/function and its' basis in law if you wish to rely on this basis for processing.

The lawful basis for holding and processing these categories of personal data comes under:

Section 163 of the Criminal Justice and Public Order Act 1994
Crime and Disorder Act 1998
Criminal Procedures and Investigations Act 1996
Protection of Freedoms Act 2012
Health and Safety at Work Act 1974
In certain circumstances - Regulation of Investigatory Powers Act (RIPA) 2000

Legal basis for processing special categories of personal data

The legal basis for processing your special categories of personal data, in accordance with the UK GDPR is:

(g) Processing is necessary for reasons of substantial public interest.

The substantial public interest condition is Data Protection Act (2018) Part 2 (10) Preventing or detecting unlawful acts

Recipients of the data

CCTV operators
Police Forces
Fire and Rescue Services
with members of the public under very strict Data Protection or Freedom of Information conditions
we will also share information with insurance companies, but only when we have been authorised by the Information Governance Team within Lancashire County Council
traffic / parking enforcement teams
Internal investigative managers in pursuance of internal investigations

Information we share

CCTV recordings

Any transfers to another country

Retention periods

Lancashire County Council will only store your information for as long as is legally required or in situations where there is no legal retention period they will follow established best practice.

File type	Description	Security	Retention period
CCTV system images	Images captured from CCTV footage	Held on localised recording devices located in secure locations within premises with restricted physical access	Up to 6 weeks and then overwritten If footage is identified and utilised for specific purposes (for example law enforcement), footage will be retained for 7 years from closure of investigation.

Your rights

You have certain rights under the UK General Data Protection Regulation (UK GDPR), these are the right:

to be informed via Privacy Notices such as this.
to withdraw your consent. If we are relying on your consent to process your data then you can remove this at any point.
of access to any personal information the council holds about yourself. To request a copy of this information you must make a subject access request in writing. You are entitled to receive a copy of your personal data within 1 calendar month of our receipt of your subject access request. If your request is complex then we can extend this period by a further two months, if we need to do this we will contact you. You can request a subject access request, either via a letter or an email to Information Governance Team, address below.
of rectification, we must correct inaccurate or incomplete data within one month.
to erasure. You have the right to have your personal data erased and to prevent processing unless we have a legal obligation to process your personal information.
to restrict processing. You have the right to suppress processing. We can retain just enough information about you to ensure that the restriction is respected in future.
to data portability. We can provide you with your personal data in a structured, commonly used, machine readable form when asked.
to object. You can object to your personal data being used for profiling, direct marketing or research purposes.
in relation to automated decision making and profiling, to reduce the risk that a potentially damaging decision is taken without human intervention.

If you want to exercise any of these rights then you can do so by contacting:

Information Governance Team
Lancashire County Council
PO Box 78
County Hall
Preston
PR1 8XJ

Or email: dpo@lancashire.gov.uk

To ensure that we can deal with your request as efficiently as possible you will need to include your current name and address, proof of identity (a copy of your driving licence, passport or two different utility bills that display your name and address), as much detail as possible regarding your request so that we can identify any information we may hold about you, this may include your previous name and address, date of birth and what council service you were involved with.

Further information

If you would like more information about this specific activity then please contact dataprotection@lancashire.gov.uk.

For more information about how we use personal information see Lancashire County Council's full privacy notice.

If you wish to raise a complaint on how we have handled your personal data, you can contact the Information Governance team who will investigate the matter.

Lancashire County Council, PO Box 78 County Hall, Fishergate, Preston, Lancashire, PR1 8XJ or email: dataprotection@lancashire.gov.uk

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO).