Closed Circuit Television Systems (CCTVS) are installed in Coláiste Chríost Rí, Capwell Road, Cork.
Any new CCTV systems will be introduced following a data protection impact assessment and consultation with staff, the board of management and the parents association. The systems already in operation will be reviewed regularly in consultation with staff, the board of management and the parents association.
The purpose of this policy is to regulate the use of Closed Circuit Television and its associated technology in the monitoring of both the internal and external environs of the premises under the remit of the Board of Management of Coláiste Chríost Rí.
CCTV systems are installed (both internally and externally) in premises for the purpose of enhancing security of the building and its associated equipment as well as creating a mindfulness among the occupants, at any one time, that a surveillance security system is in operation within and in the external environs of the premises during both the daylight and night hours each day. CCTV surveillance at the School is intended for the purposes of:
This policy relates directly to the location and use of CCTV and the monitoring, recording and subsequent use of such recorded material. Where classes and activities are carried out in rented premises, the Board of Management of Coláiste Chríost Rí will ensure that CCTV systems, where installed, are operated only in a way that is compatible with the provisions of this policy.
The Board of Management of Coláiste Chríost Rí as the corporate body has a statutory responsibility for the protection of its property, equipment and other plant as well providing a sense of security to its employees, students and invitees to its premises. The Board of Management of Coláiste Chríost Rí owes a duty of care under the provisions of Safety, Health and Welfare at Work Act 2005 and associated legislation and utilises CCTV systems and their associated monitoring and recording equipment as an added mode of security and surveillance for the purpose of enhancing the quality of life of the school community by integrating the best practices governing the public and private surveillance of its premises.
The use of the CCTV system will be conducted in a professional, ethical and legal manner and any diversion of the use of CCTV security technologies for other purposes is prohibited by this policy e.g. CCTV will not be used for monitoring employee performance.
Information obtained through the CCTV system may only be released when authorised by the Principal, following consultation with the Chairperson of the Board of Management. Any requests for CCTV recordings/images from An Garda Síochána will be fully recorded and legal advice will be sought if any such request is made. (See “Access” below). If a law enforcement authority, such as An Garda Síochána, is seeking a recording for a specific investigation, An Garda Síochána may require a warrant and accordingly any such request made by An Garda Síochána should be requested in writing and the school will immediately seek legal advice.
CCTV monitoring of public areas for security purposes will be conducted in a manner consistent with all existing policies adopted by the school, including Dignity at Work Policy, Codes of Practice for dealing with complaints of Bullying & Harassment and Sexual Harassment and other relevant policies, including the provisions set down in equality and other educational and related legislation.
This policy prohibits monitoring based on the characteristics and classifications contained in equality and other related legislation e.g. race, gender, sexual orientation, national origin, disability etc.
Video monitoring of public areas for security purposes within school premises is limited to uses that do not violate the individual’s reasonable expectation to privacy.
Information obtained in violation of this policy may not be used in a disciplinary proceeding against an employee of the school or a student attending the school.
All CCTV systems and associated equipment will be required to be compliant with this policy following its adoption by Coláiste Chríost Rí. Recognisable images captured by CCTV systems are “personal data.” They are therefore subject to the provisions of the Data Protection Acts 1988 and 2003.
Section 2(1)(c)(iii) of the Data Protection Acts requires that data is "adequate, relevant and not excessive" for the purpose for which it is collected. This means that Board of Management of Coláiste Chríost Rí needs to be able to justify the obtaining and use of personal data by means of a CCTV system. The use of CCTV to control the perimeter of the school buildings for security purposes has been deemed to be justified by the board of management. The system is intended to capture images of intruders or of individuals damaging property or removing goods without authorisation.
CCTV systems will not be used to monitor normal teacher/student classroom activity in school.
In other areas of the school where CCTV has been installed, e.g. hallways, stairwells, locker areas, the Principal has demonstrated that there is a proven risk to security and/or health & safety and that the installation of CCTV is proportionate in addressing such issues that have arisen prior to the installation of the system.
The location of cameras is a key consideration. Use of CCTV to monitor areas where individuals would have a reasonable expectation of privacy would be difficult to justify. Coláiste Chríost Rí has endeavoured to select locations for the installation of CCTV cameras which are least intrusive to protect the privacy of individuals. Cameras placed so as to record external areas are positioned in such a way as to prevent or minimise recording of passers-by or of another person's private property.
CCTV Video Monitoring and Recording of Public Areas in Coláiste Chríost Rí may include the following:
Coláiste Chríost Rí will not engage in covert surveillance.
Where An Garda Síochána requests to carry out covert surveillance on school premises, such covert surveillance may require the consent of a judge. Accordingly, any such request made by An Garda Síochána will be requested in writing and the school will seek legal advice.
NOTIFICATION – SIGNAGE
The Principal will provide a copy of this CCTV Policy on request to staff, students, parents and visitors to the school. This policy describes the purpose and location of CCTV monitoring, a contact number for those wishing to discuss CCTV monitoring and guidelines for its use. The location of CCTV cameras will also be indicated to the Board of Management. Adequate signage will be placed at the entrance to Coláiste Chríost Rí and in prominent places.
CCTV cameras in operation
Images are being monitored and recorded for the safety of our staff and students and for the protection of Coláiste Chríost Rí and its property.
STORAGE & RETENTION
Section 2(1)(c)(iv) of the Data Protection Acts states that data "shall not be kept for longer than is necessary for" the purposes for which it was obtained. A data controller needs to be able to justify this retention period. For a normal CCTV security system, it would be difficult to justify retention beyond a month (28 days), except where the images identify an issue – such as a break-in or theft and those particular images/recordings are retained specifically in the context of an investigation/prosecution of that issue.
Accordingly, the images captured by the CCTV system may be retained for a maximum of 28 days, except where the image identifies an issue and is retained specifically in the context of an investigation/prosecution of that issue.
The images/recordings will be stored in a secure environment with a log of access kept. Access will be restricted to authorised personnel. Supervising the access and maintenance of the CCTV System is the responsibility of the Principal. The Principal may delegate the administration of the CCTV System to another staff member. In certain circumstances, the recordings may also be viewed by other individuals in order to achieve the objectives set out above (such individuals may include the Gardai, the Deputy Principal, the relevant Year Head, other members of the teaching staff, representatives of the Department of Education and Skills, representatives of the HSE and/or the parent of a recorded student). When CCTV recordings are being viewed, access will be limited to authorised individuals on a need-to-know basis.
Tapes/DVDs will be stored in a secure environment with a log of access to tapes kept. Access will be restricted to authorised personnel. Similar measures will be employed when using disk storage, with automatic logs of access to the images created.
Tapes/DVDs storing the recorded footage and the monitoring equipment will be securely stored in a restricted area. Unauthorised access to that area will not be permitted at any time. The area will be locked when not occupied by authorised personnel. A log of access to tapes/images will be maintained.
Access to the CCTV system and stored images will be restricted to authorised personnel only i.e. Principal and Deputy Principal of Coláiste Chríost Rí.
In relevant circumstances, CCTV footage may be accessed:
Requests by An Garda Síochána: Information obtained through video monitoring will only be released when authorised by the Principal following consultation with the Chairperson of the Board of Management. If An Garda Síochána request CCTV images for a specific investigation, An Garda Síochána may require a warrant and accordingly any such request made by An Garda Síochána should be made in writing and the school should immediately seek legal advice.
Access requests: On written request, any person whose image has been recorded has a right to be given a copy of the information recorded which relates to them, provided always that such an image/recording exists i.e. has not been deleted and provided also that an exemption/prohibition does not apply to the release. Where the image/recording identifies another individual, those images may only be released where they can be redacted/anonymised so that the other person is not identified or identifiable. To exercise their right of access, a data subject must make an application in writing to the school Principal. The school may charge up to €6.35 for responding to such a request and must respond within 40 days.
Access requests can be made to the following: Principal, Coláiste Chríost Rí, Capwell Road, Cork.
A person should provide all the necessary information to assist Coláiste Chríost Rí in locating the CCTV recorded data, such as the date, time and location of the recording. If the image is of such poor quality as not to clearly identify an individual, that image may not be considered to be personal data and may not be handed over by the school.
In giving a person a copy of their data, the school may provide a still/series of still pictures, a tape or a disk with relevant images. However, other images of other individuals will be obscured before the data is released.
The Principal will:
IMPLEMENTATION & REVIEW
The policy will be reviewed and evaluated from time to time. On-going review and evaluation will take cognisance of changing information or guidelines (e.g. from the Data Protection Commissioner, An Garda Síochána, Department of Education and Skills, Audit units (internal and external to the school), national management bodies, legislation and feedback from parents/guardians, students, staff and others.
The date from which the policy will apply is the date of adoption by the Board of Management. Implementation of the policy will be monitored by the Principal of the school.
Signed: Maria Walk
For and behalf of board of management
APPENDIX 1 - DEFINITIONS
Definitions of words/phrases used in relation to the protection of personal data and referred to in the text of the policy;
CCTV – Closed-circuit television is the use of video cameras to transmit a signal to a specific place on a limited set of monitors. The images may then be recorded on video tape or DVD or other digital recording mechanism.
The Data Protection Acts – The Data Protection Acts 1988 and 2003 confer rights on individuals as well as responsibilities on those persons handling, processing, managing and controlling personal data. All school/ETB staff must comply with the provisions of the Data Protection Acts when collecting and storing personal information. This applies to personal information relating both to employees of the organisation and individuals who interact with the organisation
Data - information in a form that can be processed. It includes automated or electronic data (any information on computer or information recorded with the intention of putting it on computer) and manual data (information that is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system).
Personal Data – Data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, the possession of the data controller.
Access Request – this is where a person makes a request to the organisation for the disclosure of their personal data under Section 3 and/or section 4 of the Data Protection Acts.
Data Processing - performing any operation or set of operations on data, including:
Data Subject – an individual who is the subject of personal data.
Data Controller - a person who (either alone or with others) controls the contents and use of personal data.
Data Processor - a person who processes personal information on behalf of a data controller, but does not include an employee of a data controller who processes such data in the course of their employment, for example, this might mean an employee of an organisation to which the data controller out-sources work. The Data Protection Acts place responsibilities on such entities in relation to their processing of the data.