CCTV privacy notice

Explanation of the purpose

The Library operates CCTV at our facilities for the purposes of maintaining the security of property and premises and for preventing and investigating crime. CCTV may also be used to monitor staff when carrying out work duties.

The Library operates dashboard cameras on our vehicles for the purposes of incident reporting and the provision of collections security. Dashboard cameras may also be used to monitor staff when carrying out work duties.

Legal basis

Processing of this data is necessary to protect the vital interests of the data subject or another person; for compliance with legal obligations; and for the performance of tasks carried out in the public interest or for our official functions.

Types of personal information

CCTV captures visual images of persons in or around our buildings and facilities.

Dashboard cameras on our vehicles capture visual images of persons in public spaces.

Source of personal information

This personal data is collected through the CCTV cameras and dashboard cameras operated by the Library and not from a publicly available source.

Recipients of the data

This data will only be processed by the National Library of Scotland for this purpose.

In certain circumstances we may be required to disclose CCTV and dashboard camera images to certain bodies of authority, such as the police and emergency services.

Retention period

We process CCTV footage for 31 days after the date of capture, although we may process footage for a longer period, for example if the footage is relevant to an investigation.

Dashboard camera footage is stored on an SD card which can hold 4 hours of footage. Footage is overwritten once this storage capacity is reached. Footage may be downloaded and processed for a longer period, for example, if the footage is related to an incident.

We have a detailed range of retention periods for different types of records, some of which may also apply to information processed in the course of CCTV usage. Please see our retention schedules (811 KB; 77 pages) for details, in particular under business classification 06.08.02.06 'Data protection - CCTV records' on page 66.

While we are working to implement our retention schedules, some data may be retained longer than required under the schedules.

Your rights in relation to this data

Your core rights as a data subject apply to this processing.

Will the data be transferred to third parties?

No, except to the extent that we are required to share this data with certain bodies of authority, such as the police and emergency services.

Will the data be transferred outside the UK or the European Economic Area (EEA)?

No.

Will the data be used in automated decision-making?

No.