UK CCTV Compliance Pack — DPIA, ICO, Surveillance Camera Code
Council and enterprise grade compliance pack: DPIA template aligned to the ICO video-surveillance guidance, retention controls, signage standards, subject-access-request workflow, and the Surveillance Camera Code 12-principle map.
Companion to the human-readable UK compliance landing. Read the landing for the summary; download the whitepaper for the full reference and templates.
What's inside (readable summary)
The full pack is a 22-page PDF. The summary below is indexable on this page so the reference is useful even before the download, and so search engines can ground their answers against the same source the VMukti DPO team cites to UK councils, NHS trusts, and transport authorities.
1. UK GDPR + Data Protection Act 2018 stack
UK GDPR + DPA 2018, the Surveillance Camera Code of Practice (2013, updated 2021) issued under the Protection of Freedoms Act 2012, ICO video-surveillance guidance, and the Human Rights Act 1998 Article 8 right to private life. The whitepaper opens with how each instrument applies to a public-space surveillance scheme and which document the controller cites in an audit defence file.
2. DPIA template aligned to the ICO format
A complete DPIA template aligned to the ICO video-surveillance guidance. Covers necessity test, proportionality, lawful basis selection, individual-rights impact, retention rationale, residual-risk register, and the sign-off chain. The same template is used by VMukti DPO consultants for council and NHS engagements.
3. Retention controls and the 28-31 day rule
Default retention is 28-31 days for public-space CCTV. Longer retention requires a documented justification per camera or per scheme. The whitepaper details how to enforce retention at the storage layer rather than relying on operator procedure, including the automated purge audit log every regulator wants to inspect.
4. Signage, transparency, and lawful basis
Public signage that identifies the controller, the purpose, and the contact for SARs. Lawful basis recorded against each camera. Templates for the four most common controller scenarios — council, NHS, transport authority, private commercial space — with the wording the ICO has not challenged.
5. Subject-access-request (SAR) workflow
A 30-day SAR response runbook with redaction tooling for face and number-plate blurring, audit log of every export, controller-to-controller disclosure protocol, and the templated response letter. Built-in tooling reduces the average UK council SAR response time from weeks to hours.
6. Surveillance Camera Code 12-principle map
A direct map of each of the 12 Surveillance Camera Code principles to the VMS feature that satisfies it. The map is the single page most procurement teams paste into a council scheme application or an NHS information-governance review.
What ships with the download
- 22-page PDF compliance pack (this whitepaper)
- DPIA template aligned to ICO format (Word + PDF)
- Lawful-basis template per controller scenario
- Public-space signage standard
- SAR response runbook + redaction guidance
- Surveillance Camera Code 12-principle map
- Retention policy template per camera class
- Data-sharing MOU template (council ↔ police)
Download — UK CCTV Compliance Pack — DPIA, ICO, Surveillance Camera Code
Council and enterprise grade compliance pack: DPIA template aligned to the ICO video-surveillance guidance, retention controls, signage standards, subject-access-request workflow, and the Surveillance Camera Code 12-principle map.