CCTV Policy for Dunstone Optometry – re cameras in Waiting & Reception Areas

1. Purpose of CCTV

The practice uses Closed Circuit Television (CCTV) in the waiting and reception areas to:

  • Protect staff, patients, and visitors
  • Deter and detect crime, theft, and vandalism
  • Assist in the investigation of incidents
  • Safeguard practice property and clinical equipment

CCTV is not used for monitoring staff performance or recording clinical consultations.

2. Legal Basis

The use of CCTV is carried out under:

  • UK GDPR and the Data Protection Act 2018
  • The practice’s legitimate interest in ensuring safety and security
  • ICO guidance on video surveillance

The practice ensures CCTV use is necessary, proportionate, and justified.

3. Location of Cameras

Cameras are installed only in:

  • The upstairs waiting area, &
  • The downstairs reception area

Cameras do not record:

  • Consultation rooms
  • Staff rooms
  • Toilets
  • Any area where privacy is expected

4. Signage

Clear and visible signs are displayed at all entrances and within the waiting/reception areas stating that CCTV is in operation.

5. Data Controller

The optometry practice is the Data Controller for CCTV footage.

Contact details: Dunstone Optometry, 3 Queen Street, Hadleigh IP7 5DZ, 01473 823755, andrew@dunstoneinsight.com

6. Access to Footage

Access is strictly limited to:

  • The Practice Manager
  • The Owner/Director
  • Other authorised personnel only when necessary

Footage may be shared with:

  • Police or law enforcement (upon formal request)
  • Insurers (where relevant to a claim)

Footage is not shared with third parties for marketing or non‑security purposes.

7. Storage & Retention

  • Footage is stored securely on encrypted systems.
  • Access is password‑protected and logged.
  • Footage is retained for 30 days unless required for an ongoing investigation, legal claim, or police request.
  • After the retention period, footage is automatically deleted.

8. Data Subject Rights

Individuals recorded by CCTV have the right to:

  • Request access to footage in which they appear
  • Request correction or deletion where appropriate
  • Raise concerns about CCTV use

Requests must be made in writing to the Practice Manager. Identification may be required.

9. Security Measures

  • CCTV systems are password‑protected
  • Only authorised staff have access
  • Footage is stored on secure servers or encrypted devices
  • Regular checks ensure cameras are functioning correctly and signage is visible

10. Review of CCTV Use

The practice reviews this policy annually to ensure:

  • CCTV remains necessary and proportionate
  • Data protection obligations are met
  • Equipment and signage remain compliant

11. Complaints

Concerns about CCTV use can be raised with Andrew Dunstone. If unresolved, individuals may contact the Information Commissioner’s Office (ICO).