Posts Tagged 'Data Protection'

Is Big Brother Watching your staff or clients?-use of CCTV in the workplace

There are two main issues that arise in relation to the use of CCTV monitoring namely,

1. Data Protection and

2. how the information that is collected is used for disciplinary purposes

Data Protection 

 The Information Commissioner in the UK has issued a Code of Conduct that develops the Act in the context of employment practices. Whilst clearly the Code is not legally binding in Ireland it is likely to be used in this jurisdiction as a basis and it would be best practice to ensure that you comply as best it can with the Code.  Part of this Code deals with the issues that arise when an employer monitor its employees through opening or monitoring employees’ emails to recording the activities of employees by means of CCTV cameras.  Whilst most Internet and Email usage policies will comply with the Code businesses that use CCTV should include a similar policy relation to the use of CCTV.

What about monitoring? 

Monitoring in general should comply with the Code and must comply with the Data Protection Acts and the following matters should be considered: 

  • Companies that retain data must register with the Data Protection Commissioner and the existence of CCTV should be included in said registration; 
  • The organisation must decide the length of time they retain the information collected which should be reasonable; 
  • The personnel who have access to the information must be limited and the information/data must be properly and securely stored, particularly when there is sensitive information contained in the data collected; 
  • The equipment must be in good working condition.

Furthermore, where CCTV is used the following specific guidance is given:  

  • Signs must be erected advising of the presence of CCTV;

 

  • Where possible, any CCTV should be targeted at areas of particular risk and confined to areas where expectations of privacy are low;
  •  
  • The relevant company should inform employees that CCTV monitoring is being carried out and where and why it is being carried out (unless covert monitoring is justified which is dealt with below) 
  • The Company must ensure that those employees that are inadvertently caught by the monitoring are made aware of its operation and purpose through adequate notices and other means. 

What about Covert Monitoring

Whilst covert monitoring itself is not subject to the DPA once it results in records/tapes/data being kept about an employee the DPA will apply.  Covert monitoring is only permitted under certain circumstances, for example if there are grounds for suspecting criminal activity or malpractice and informing an employee would prejudice its prevention or detection.  If any employer is considering covert monitoring the following guidance should be followed: 

  • Any cover monitoring should be authorised by senior management; 
  • Covert monitoring should only be used as part of a specific investigation and should cease once the investigation is complete; 
  • Covert monitoring should not be used in areas where employees would genuinely and reasonably expect to be private; 
  • Information that is obtained through covert monitoring should only be used if it relates to the prevention or detection of criminal activity or equivalent malpractice.  Any other information collected as a result of this monitoring should be disregarded. 

These guidelines should also be followed under the next heading –use of CCTV evidence in Human Resources.

Can I use CCTV evidence?

Whilst CCTV is primarily installed and used as a means to provide security for businesses and premises some employers use CCTV to monitor employee’s activities in the workplace. Consequently, whilst employers may have installed video surveillance as a security measure, it has now access to video footage that could be used as a means of gathering evidence to justify disciplining employees for misconduct. 

However, it goes without saying that, as with all disciplinary matters, caution must be exercised in using this information to justify disciplining and/or terminating an employee for misconduct or breach of procedures and policies e.g. Health and Safety.  A fair procedure must always be followed and a balance must be struck between the Company’s right to protect its business interests and the employee’s rights. 

It appears from cases appearing recently before the Employment Appeals Tribunal (EAT) that while the actual use of CCTV is not considered inappropriate; it is essential that fair procedures be adhered to in relation to the presentation of CCTV evidence to the employee and the manner in which the dismissal is carried out.  The EAT appears to have no difficulty with accepting such CCTV evidence in making its determinations in relation to unfair dismissals. 

Best practice in relation to the use of CCTV would be to inform all employees of any and all CCTV surveillance in the workplace. Often the installation of CCTV measure is taken as a security measure and employees are not informed that their conduct may be monitored.  Employers should have clear policies in place in relation to the monitoring of employees and ideally a clause should be inserted in the contract of employment or staff handbook, whereby the employee gives his or her clear consent to all types of monitoring (e-mail, Internet, business calls and CCTV) in the workplace.


David Bell, Managing Director