Public space surveillance CCTV system privacy notice

Cefas is the data controller for images obtained through its public space surveillance CCTV system and we have a legal obligation to process this personal information.

You may contact our data protection manager by emailing


What will we do with your data?

Your images are automatically retained for 30 days from when they were captured. After this time they will be overwritten and deleted by the system. We may keep your images longer if they are required for the prevention of crime or if someone with a right to access them has asked us to. They will be held on our system for no more than 12 months. 


What are your rights?

You have the right to request access to your personal information to:

  • ask for errors to be corrected
  • restrict how your information is used
  • object to how it is processed
  • request that your data is deleted.

You also have the right to lodge a complaint with the Information Commissioner's Office if you are not happy with how your data is processed.


What are the consequences of you not providing data?

Not applicable for collection of CCTV images.


How will we share your data?

CCTV images are stored securely and are only accessible by authorised CCTV staff. They are not routinely shared unless the request falls within the usage purposes and objectives.

The majority of external requests for access to images are from the Police or other enforcement agencies. There may be a request under the Data Protection Act or the Freedom of Information Act to allow individuals to see or be informed about any data held about them.

Since data is only stored for a maximum of 30 days, it is vital that such requests are made via email address, but in any event within 21 days to allow the relevant data to be provided.

Apart from where previously stated, we do not pass your details to third parties unless we are lawfully able to do so for the prevention and detection of crime and fraud.