The Data Protection Commissioner has made his view clear about the use of CCTV in disciplinary cases and has extensive guidance for data controllers on his website.
The following case highlights the difficulties posed in using CCTV in disciplinary cases.
In 2008, the Commissioner received complaints from two employees of the same company regarding their employer’s intention to use CCTV footage for disciplinary purposes.
The employer had used CCTV images to compile a log that recorded the employees’ pattern of entry and exit from their place of work. The employer sent letters to each employee and their representatives along with CCTV footage requesting that they attend a disciplinary meeting to discuss potential irregularities in their attendance.
The employees immediately lodged complaints with the Commissioner and stated that they had never been informed of the purpose of the CCTV cameras on the campus where they were employed. They pointed out that there were no signs visible about the operation of CCTV.
The Commissioner informed the company that, to satisfy the fair obtaining principle of the Data Protection Acts with regard to the use of CCTV cameras, those people whose images are captured on camera must be informed about the identity of the data controller and the purpose(s) of processing the data. This can be achieved by placing easily read signs in prominent positions.
A sign at all entrances will normally suffice. If an employer intends to use cameras to identify disciplinary (or other) issues relating to staff, as in this instance, staff must be informed of this before the cameras are used for these purposes.
The employer accepted the views of the Commissioner and informed the two employees that it was not in a position to pursue the matter of potential irregularities in attendance as it could not rely on CCTV evidence obtained in contravention of the Data Protection Acts.
This case demonstrates how data controllers are tempted to use personal information captured on CCTV systems for a whole range of purposes. Many businesses have justifiable reasons, related to security, for the deployment of CCTV systems on their premises. However, any further use of personal data captured in this way is unlawful under the Data Protection Acts unless the data controller has made it known at the time of recording that images captured may be used for those additional purposes e.g. disciplinary.
Transparency and proportionality are the key points to be considered by any data controller before they install a CCTV system. Proportionality is an important factor in this respect since the proposed use must be justifiable and reasonable if it is not to breach the Data Protection Acts. Notification of all proposed uses will not be enough if such uses are not justifiable.
Source: Case study 10 of 2008, Data Protection Commissioner website, www.dataprotection.ie
How Can We Help You?
We provide advice and guidance on the proper procedure for conducting Investigations, Hearings and Appeals or we can lead and conduct investigations, hearings and appeals where you may require external, independent, expertise. Click also on Disciplinary/Dismissal Procedures and Bullying Procedures for more information.
Next Steps
If you are an employer and have any questions, please contact your CollierBroderick HR Advisor, call us on 01 8666426, contact us, or email us on enquiries@collierbroderick.
