How GDPR affects CCTV & do you need facial redaction? - Britannia



Since the implementation of the General Data Protection Regulation rules we have seen a lot of confusion from our clients as to CCTV and what they need to do to ensure compliance.

What does it mean in relation to CCTV?

CCTV systems need to have a justified purpose. Perimeter CCTV can be easily rationalised for intrusion detection & to prevent vandalism but when the system is perhaps being used in a staff canteen area this may not be as easy to rationalise. A justifiable reason would be for health & safety reasons and to reduce accidents.

It is also important to communicate the purpose of why CCTV is in operation & signage must be clearly visible, including contact details of the data controller.

Can people ask for a copy of CCTV?

The GDPR rules gives people the rights to their own data, including the right to obtain a copy of any CCTV footage. Companies must oblige with these requests, free of charge and data controllers have one month to respond.

The issue in releasing the footage is by default information about others is provided i.e. other people caught on camera.

This is where face redaction may be necessary.

Will redaction of faces be necessary?

As long as the CCTV is kept in a secure way to fulfil the purpose it was intended for & stored for no longer than necessary there is no need to redact faces or blur images for GDPR compliance. However, once a video is shared with third parties, redaction and blurring of faces is required.

As a company it is likely you will receive individual requests for a copy of CCTV footage. It is within their rights that a copy be made & given to them. The issues arises when other parties are captured in the footage, meaning before any footage can be given out other parties must be blurred out.

How can Britannia Monitoring help?

At Britannia monitoring we are able to redact footage for our clients for all types of CCTV systems; analogue & IP. We can redact faces or full bodies to suit.

Our redaction service provides a hassle-free way for our clients to ensure compliance to GDPR.

If you are interested in finding out more, please contact us on or fill in the contact us form on our website and we will be in touch.


Leave a Reply

Your email address will not be published. Required fields are marked *