1、BSI Standards PublicationBS 7958:2015Closed circuit television(CCTV) Management andoperation Code of practicePublishing and copyright informationThe BSI copyright notice displayed in this document indicates when the documentwas last issued. The British Standards Institution 2015Published by BSI Stan
2、dards Limited 2015ISBN 978 0 580 86308 0ICS 13.310; 13.320; 33.160.40The following BSI references relate to the work on this document:Committee reference GW/3Draft for comment 15/30299657 DCPublication historyFirst published as BS 7958, December 1999Second edition, December 2005Third edition, Septem
3、ber 2009Fourth (present) edition, August 2015Amendments issued since publicationDate Text affectedBS 7958:2015 BRITISH STANDARDContentsForeword iiIntroduction iii1 Scope 12 Normative references 13 Terms and definitions 24 Principles and management of a CCTV scheme 45 Personnel 126 CCTV control centr
4、e 137 Incident handling 148 Privacy and disclosure issues 159 Recorded material management 1710 Documentation 20AnnexesAnnex A (informative) Surveillance Camera Code of Practice 12 guidingprinciples 22Annex B (informative) Data Protection Act 1998 8 guiding principles 23Annex C (normative) Contracto
5、r responsibilities within BS 7958 24Annex D (normative) Management and operation of CCTV traffic enforcementcameras 26Annex E (normative) Contracted remote CCTV control centre responsibilitieswithin BS 7958 33Bibliography 36List of figuresFigure D.1 Example of CCTV image receiving centre log sheet 2
6、9Figure D.2 Example of occurrence log 30List of tablesTable A.1 12 guiding principles of the Surveillance Camera Code ofPractice 22Table B.1 8 guiding principles of the Data Protection Act 1998 23Summary of pagesThis document comprises a front cover, an inside front cover, pages i to iv,pages 1 to 3
7、8, an inside back cover and a back cover.BRITISH STANDARD BS 7958:2015 The British Standards Institution 2015 iForewordPublishing informationThis British Standard is published by BSI Standards Limited, under licence fromThe British Standards Institution, and came into effect on 31 August 2015. It wa
8、sprepared by Technical Committee GW/3, Manned security services. A list oforganizations represented on this committee can be obtained on request to itssecretary.SupersessionThis British Standard supersedes BS 7958:2009, which is withdrawn.Information about this documentThis is a full revision of the
9、 standard, which has been updated to reflect currentpractice.Use of this documentAs a code of practice, this British Standard takes the form of guidance andrecommendations. It should not be quoted as if it were a specification andparticular care should be taken to ensure that claims of compliance ar
10、e notmisleading.Any user claiming compliance with this British Standard is expected to be able tojustify any course of action that deviates from its recommendations.Presentational conventionsThe provisions of this standard are presented in roman (i.e. upright) type. Itsrecommendations are expressed
11、in sentences in which the principal auxiliaryverb is “should”.Commentary, explanation and general informative material is presented insmaller italic type, and does not constitute a normative element.The word “should” is used to express recommendations of this standard. Theword “may” is used in the t
12、ext to express permissibility, e.g. as an alternative tothe primary recommendation of the clause. The word “can” is used to expresspossibility, e.g. a consequence of an action or an event.Notes and commentaries are provided throughout the text of this standard.Notes give references and additional in
13、formation that are important but do notform part of the recommendations. Commentaries give background information.Contractual and legal considerationsThis publication does not purport to include all the necessary provisions of acontract. Users are responsible for its correct application.Compliance w
14、ith a British Standard cannot confer immunity from legalobligations.BRITISH STANDARDBS 7958:2015ii The British Standards Institution 2015IntroductionClosed circuit television (CCTV) schemes that process personal data are obligedto conform to certain legislation, most importantly the Data ProtectionA
15、ct 1998 (DPA) 1, the Human Rights Act 1998 (HRA) 2, the Freedom ofInformation Act 2000 3, the Protection of Freedoms Act 2012 4 and theRegulation of Investigatory Powers Act 2000 5. This British Standard is designedto supplement that legislation and aims to ensure fairness, purpose andresponsibility
16、.Attention is also drawn to the Private Security Industry Act 2001 6, whichcontains provisions for regulating the private security industry. A person fallingwithin the definition of providing security industry services under the PrivateSecurity Industry Act 2001 6 is required to be licensed in accor
17、dance with thatAct.Monitoring for traffic offences does not require a SIA (Security IndustryAuthority) Licence. However, if operators monitoring for traffic offences, whoare employed by organizations providing the service under contract, provide anadditional security service involving use of CCTV th
18、en they are required to holdthe SIA CCTV (Public Space Surveillance) Operator Licence prior to beingdeployed in contractual security work.Attention is drawn to the Surveillance Camera Code of Practice 7 andits 12 guiding principles, which are applicable to public space CCTV systems.Irrespective of t
19、he ownership, this British Standard covers CCTV schemes used inareas where the public have a “right to visit”. These areas include, but are notlimited to:a) a place that is privately owned, but where the public perceive no boundary;b) a place where a public service is offered;c) public footpaths, ro
20、ads, bridle-ways, etc.;d) educational establishments and hospitals;e) sports grounds where access is unrestricted, supermarkets and housingareas; andf) public arenas such as sports stadiums and public places where events areheld as an alternative to regular activities in those locations.BRITISH STAN
21、DARD BS 7958:2015 The British Standards Institution 2015 iiiBRITISH STANDARDBS 7958:2015This page deliberately left blankiv The British Standards Institution 20151 ScopeThis British Standard gives recommendations for the management and operationof CCTV within a controlled environment, where data tha
22、t might be offered asevidence are received, stored, reviewed or analysed. This standard applies to themonitoring and management of public spaces, including automatic numberplate recognition (ANPR) and traffic enforcement cameras.For control rooms whose operation falls within the scope of BS 7499, BS
23、 5979 orBS 8591, all of the security requirements, both physical and procedural, of therelevant British Standard remain applicable.This British Standard is applicable to CCTV schemes used in public places such asthe following:a) areas where the public are encouraged to enter or have a right to visit
24、,such as town centres, shopping malls, public transport, healthestablishments;b) schemes that overlook a public place, such as traffic monitoring and trafficenforcement schemes; andc) private schemes where a camera view includes a partial view of a publicplace.This British Standard also provides goo
25、d practice for all other CCTV schemes.This British Standard takes due regard of the 12 guiding principles of theSurveillance Camera Code of Practice 7 (see Annex A) and the InformationCommissioners CCTV Code of practice 8 and the Data Protection Act 1998 1principles (see Annex B).2 Normative referen
26、cesThe following referenced documents are indispensable for the application ofthis document. For dated references, only the edition cited applies. For undatedreferences, the latest edition of the referenced document (including anyamendments) applies.BS 5979, Remote centres receiving signals from fir
27、e and security systems Code of practiceBS 7499, Static site guarding and mobile patrol service Code of practiceBS 7858, Security screening of individuals employed in a security environment Code of practiceBS 8591, Remote centres receiving signals from alarm systems Code of practiceBS EN 15713, Secur
28、e destruction of confidential material Code of practiceBIP 0008-1, Evidential weight and legal admissibility of information storedelectronically Code of practice for the implementation of BS 10008BIP 0008-2, Evidential weight and legal admissibility of information transferredelectronically Code of p
29、ractice for the implementation of BS 10008BIP 0008-3, Evidential weight and legal admissibility of linking electronic identityto documents Code of practice for the implementation of BS 10008BRITISH STANDARD BS 7958:2015 The British Standards Institution 2015 13 Terms and definitionsFor the purposes
30、of this British Standard, the following terms and definitionsapply.3.1 CCTV control centresecure central location for a CCTV scheme, where images are collected, used,disclosed, retained or disposed of3.2 CCTV schemetotality of arrangements for CCTV in a locality including, but not limited to, thetec
31、hnological system, staff and operational procedures3.3 CCTV systemsurveillance items comprising camera and associated equipment for monitoring,transmission and controlling purposesNOTE A whole system is not limited to equipment sited at one locality. It caninclude systems that use dial-in dial-out,
32、remote transmission or decentralizedcontrol.3.4 clean tapetape which has either been degaussed not more than 12 times, or is new3.5 contractorparty contracted by the owner to undertake agreed services3.6 controlled environmentlocation in which data that might be offered as evidence are received, sto
33、red,reviewed or analysed, including at the CCTV control centre3.7 customerindividual or body retaining the services of an organization3.8 dataall information, including that about a personNOTE In CCTV systems, this includes pictures, sound and any other associated,linked or processed information.3.9
34、 evidence copycopy taken from the master copy with a clear audit trail which is offered asevidence3.10 hard copy printpaper copy of an image or images that already exist on recorded material3.11 incidentactivity that warrants a response3.12 local proceduresdocuments relating to the processing of asp
35、ects of the CCTV scheme3.13 manager(s)person or persons designated and trained as having direct responsibility for theimplementation of the policies, objectives and methods of control of a CCTVscheme, as defined by the owner of the schemeBRITISH STANDARDBS 7958:20152 The British Standards Institutio
36、n 20153.14 master copyfirst copy to be produced, that is designated and documented as such and thenstored securely pending its production (if required) at court as an exhibitNOTE All use and movement of the master copy is logged in an audit trail.3.15 monitoring periodlength of time during which mon
37、itoring is carried out as defined by localprocedures3.16 operatorperson specifically designated and authorized by the owner of a CCTV scheme tocarry out the physical operation of controlling that scheme3.17 operators logrecord, including date and time, for a workstation that also includes details of
38、any events, plus details of activities such as maintenance and use3.18 organizationsole or principal provider of CCTV monitoring services to a particular customer3.19 ownerlegal person or entity, agency or individual designated as having overallresponsibility for the formulation and implementation o
39、f the policies, objectivesand control of a CCTV schemeNOTE 1 The owner also has responsibility for all statutory responsibilities, includingthe role of “data controller” (see the Data Protection Act 1998 1).NOTE 2 The owner could be a partnership, provided it has a formal constitution.3.20 privacy i
40、mpact assessmentassessment of the impact a CCTV system has on an individuals right to privacyNOTE Attention is drawn to the Human Rights Act 1998 2 and the DataProtection Act 1998 1. Further guidance can be found in the InformationCommissioners Conducting privacy impact assessments code of practice
41、9.3.21 processobtaining, recording or holding information or data or carrying out anyoperation or set of operations on the information or dataNOTE This definition is taken from the Data Protection Act 1998 1.3.22 recorded materialany data recorded on any medium that has the capacity to store data3.2
42、3 recording materialany medium that has the capacity to store data and from which data can laterbe recalled, irrespective of time3.24 recordingselectronic capture of images or data3.25 remote centrelocation remote from the supervised premises, in which the informationconcerned with the state of one
43、or more alarm systems is collected either forreporting or for onward transmissionBRITISH STANDARD BS 7958:2015 The British Standards Institution 2015 33.26 secure storagelockable cabinet, container or room located within the CCTV control room orthe building which houses the CCTV control room and to
44、which access isrestricted to those persons authorized by the owner or supervisor3.27 staffpersonnel involved in the management and operation of CCTV3.28 supervisorperson designated and trained to ensure the required operation of the CCTVscheme and to meet any procedural instruction issued by the own
45、er or manager3.29 temporary systemsmobile and remote systems which are part of the main CCTV scheme3.30 working copycopy of recordings which is used for reviewNOTE Also referred to as the “slave copy”.4 Principles and management of a CCTV scheme4.1 Objectives4.1.1 UseThe objectives of a CCTV scheme
46、should have a clearly defined purpose orpurposes in pursuit of a legitimate aim. The data held should be appropriate forthose objectives and the owner should have reasonable cause to hold the data.The purpose or purposes should be clearly documented against which theongoing use of the system and any
47、 images or other data can be assessed.NOTE 1 Attention is drawn to Principle 1 of the Surveillance Camera Code ofPractice 7 and Principle 2 of the Data Protection Act 1998 1.NOTE 2 Many CCTV schemes have developed ancillary public information outputsthat do not relate directly to an individual. The
48、extended use of such schemes isaimed at improving public information and confidence and does not compromisenon-disclosure. The following are some examples: availability of car parking relayed to local radio or the internet; traffic congestion reports, local radio, phone-in or answer service; and pub
49、lic awareness, crime watch (vulnerable areas monitored actively to allaypublic concern about safety and enable a swift response to incidents).4.1.2 EffectivenessA CCTV scheme should capture, process, analyse and store images and data at aquality which is suitable for its defined purpose. The data or images should notbe held for longer than necessary in accordance with the schemes objectives.NOTE 1 For example, recording sound in a public place where a conversation mightbe private might not be app
