Some employers may be surprised to discover that video footage captured by CCTV can constitute personal data under the General Data Protection Regulation (GDPR). This means that there are certain rules that must be followed when processing this data, especially in the context of using this footage as evidence of an employee’s misconduct.
The following guide for employers looks at the legal considerations when using CCTV evidence at a disciplinary, from what the law says about employers recording the activities of their employees, to best practice advice around CCTV in the context of disciplinary proceedings.
What does the law say about recording employees’ activities?
By law, employers can monitor the activities of both their staff and visitors using CCTV, although there are risks associated in doing so. These risks include potential breaches of data protection law, where GDPR covers any monitoring by an employer that includes collecting and processing images. Additional risks arise out of potential breaches of an individual’s human rights, including the right to privacy, plus the risk of undermining an employee’s trust and confidence, and irreparably damaging the employment relationship because of this.
Under GDPR, although employers are entitled to monitor employee activity, they must have a lawful basis to do so. They must also communicate in advance the fact that CCTV is installed on their premises and in active use, and the purpose for which the surveillance will be used.
Employers may install CCTV for various reasons, although typically this will be for safety and security reasons, to help safeguard their property and staff from the threat of crime. In fact, in many cases, the signage used for CCTV will state ‘This CCTV recording system is operated for purposes of security, safety and potential prosecution’. By forewarning potential offenders of the fact that they are being filmed, it is hoped that this will act as an effective deterrent.
What are employers allowed to record using CCTV technology?
The use of CCTV in the workplace is not, of itself, unlawful. However, this does not give an employer carte blanche to record anything and everything. Employers have a right to protect their legitimate business interests using CCTV, provided the deployment of cameras is necessary and proportionate, and addresses a pressing need that cannot be addressed by any other means. To be deemed lawful, this means that CCTV monitoring must not be either overly intrusive or disproportionate to the purpose for which it is intended to be used.
Where staff have a reasonable expectation of privacy, any use of CCTV will almost certainly expose an employer to potential breaches of both data protection and human rights laws, as well as breach of the implied duty of mutual trust and confidence between the parties. For example, the use of CCTV in either toilets, changing rooms or break areas would be hard to justify under any circumstances on the grounds that this would be far too intrusive and an invasion of privacy. In contrast, in public areas — such as a lobby, lift or the entrance and exit points of a building — where expectations of privacy are low, CCTV is far more easily justified.
An example of a scenario which might fall somewhere in the middle would be where CCTV monitors the entrance to each department of a workplace, but a number of workstations fall within the cameras’ view. Given that this would inadvertently result in the everyday activities of certain individuals being constantly recorded, steps would need to be taken, for example, adjusting the camera angle, to avoid any disproportionate monitoring.
In the context of covert CCTV surveillance, where cameras are secretly installed, this will only be justifiable in exceptional circumstances. This could be, for example, where there are grounds to suspect criminal activity or serious malpractice, where to notify staff of hidden CCTV would jeopardise a criminal or regulatory investigation. However, even in these circumstances, any covert surveillance should only be targeted at those under suspicion, while still ensuring that areas where privacy is expected remain private. Covert surveillance should also only be undertaken for limited periods and as part of a specific investigation.
In all other cases, employers must ensure that they display visible CCTV signage in all areas where surveillance is taking place, explaining that CCTV is in use and the reasons for this. This signage should also provide legible details of the organisation or person responsible for the CCTV system and how they can be contacted. This is because any data subject, where footage has been obtained of them in which they are identifiable, has the right of access to this data.
The law on using CCTV evidence at a disciplinary
Employers can often be tempted to use information captured on CCTV for all kinds of purposes, and while many have justifiable reasons for deploying CCTV systems, such as for the prevention and detection of crime, any further use of personal data captured in this way will be unlawful under data protection law. This can include using CCTV evidence at a disciplinary.
In accordance with the principles of fairness and transparency under GDPR, employers are only permitted to process any personal data obtained by them for the purpose(s) for which it was collected. This means that if CCTV has been installed for safety and security reasons, with signage to this effect, it would not be fair and lawful to use the footage for any other reason. This will be the case, even if the CCTV footage provides clear evidence of misconduct on the part of an employee, and even if this misconduct was only inadvertently discovered during the course of viewing footage for the purpose of crime prevention or detection.
This essentially means that CCTV footage can only be used by employers in a disciplinary context where they have clearly communicated to staff in advance that they they are being monitored, for example, to manage employees’ performance, from the amount of work that they do to potential misconduct matters. The employer must also be able to justify using CCTV to monitor employee activities for these purposes, where it may be difficult to show a need for such oppressive methods, if alternative methods are available, such as human supervision.
If an employer suspects an employee of breaking the law and letting them know about it would make it harder to detect the crime, the employer can lawfully monitor those involved without their knowledge, but only as part of a specific investigation. In these circumstances, any relevant footage could then be used as evidence against the employee to justify dismissal for gross misconduct, although these types of scenarios are likely to be exceptional. Further, if evidence of other minor misconduct is inadvertently revealed from any covert CCTV footage, this should not be used against an employee in a disciplinary context.
Legal risks for employers using CCTV evidence at a disciplinary
In many cases, the use of CCTV evidence at a disciplinary hearing will be unlawful, thereby giving rise to a number of both legal and practical risks for the business, including:
- an infringement of GDPR: if a business is found to be in breach of the GDPR, they could be liable to large fines, bans on data processing and bad publicity. This means that employers must ensure that, among other things, they have a lawful basis for processing data and that any data is not used for a purpose different to the one for which it was intended;
- a violation of human rights: if the nature of any CCTV monitoring is overly intrusive, including constant monitoring for the purposes of detecting any minor misconduct, this is likely to constitute a breach of an employees’ right to privacy;
- a breach of employee trust: if CCTV is installed without an employee’s knowledge, or CCTV evidence is used for a different purpose to that which the employees were made aware, this could easily erode any trust and confidence in the employer. If the employee feels forced to resign because of this, this could result in a claim for constructive dismissal;
- an unfair decision to dismiss: if CCTV is installed or used unlawfully, including the unlawful use of CCTV evidence in the context of a disciplinary hearing, and an employee is dismissed because of this, they may have a claim for unfair dismissal.
Using CCTV at work
Before an employer can monitor the activities of their staff and visitors using CCTV, or even consider using any footage obtained at a disciplinary hearing, they must first register as a data controller with the Information Commissioner’s Office (ICO). This will require the employer to outline the purpose of using CCTV in the workplace and pay a data protection fee.
The employer must also tell staff and visitors that they may be recorded, typically through displaying signs, which must be clearly visible and legible; ensure that footage is kept securely, controlling who has access to this; and only keep the footage for as long as is strictly necessary, typically no more than a few short months, unless there is a criminal investigation.
Where the employer is wanting to use CCTV to monitor and manage its workforce, including any misconduct matters which may arise, this must be set out in writing within a workplace policy. Employees should also be made aware of this policy during the course of any induction procedure at the start of their employment. However, the use of a written policy or statement, warning employees that their work activities are being recorded and may be used as evidence against them, does not necessarily justify this level of data processing.
In cases where the use of CCTV data in a disciplinary context can be more easily justified, where footage has been obtained because the employee was suspected of committing a criminal offence, the employer must still follow a fair disciplinary procedure. Even if the footage reveals a clear case of criminality and gross misconduct, for example, theft from the employer, the employer must provide the employee with a chance to defend their position and put forward any mitigation. The employer must also ensure that the employee is provided with a copy of the footage in advance so that they are fully appraised of the case against them.
Advice for using CCTV evidence
There are a number of best practice steps that employers can take to ensure that any use of CCTV is lawful, and as a means of minimising the risk of legal proceedings, especially when it comes to ‘using CCTV evidence at a disciplinary UK’, including:
- Carrying out a data protection impact assessment prior to CCTV deployment to weigh up whether the benefits of using CCTV justify the adverse impact on employees, and assessing any alternative means that can be deployed, such as human supervision and training
- Keeping a record of this assessment in the event of any legal proceedings
- Being fully transparent with staff about how CCTV is being used and where
- Providing clearly visible and legible GDPR-compliant signage
- Providing a workplace policy setting out the purpose(s) for which CCTV will be used, including the possible use of covert surveillance where an employee is suspected of a crime.
Need assistance?
DavidsonMorris’ employment lawyers work with employers to support with all aspects of workplace disciplinary procedures, including advice on evidence and the use of CCTV footage. We can advise on specific matters to help your organisation ensure compliance with your legal obligations while protecting your best interests. Through our fixed-fee employment law service, Triple A, employers can access unlimited employment law advice to support with workforce management. For expert advice and support, contact us.
Using CCTV evidence at a disciplinary FAQs
Can CCTV footage be used in a disciplinary?
CCTV footage cannot usually be used in a disciplinary context, where the use of any images or data captured on camera can only be used for the purposes for which it was obtained, for example, for safety and security reasons.
Can you use CCTV against an employee?
CCTV can be used to covertly monitor an employee, but only in exceptional circumstances, for example, as part of a criminal investigation. Otherwise, the employee must be made aware that they are being monitored and the reasons for this.
Is CCTV evidence enough to convict?
CCTV evidence, provided this is obtained lawfully and therefore admissible in court, can be sufficient to secure a conviction against someone guilty of an offence. However, this would need to clearly show the identity of the perpetrator.
Can my boss spy on me using CCTV?
CCTV in the workplace is legal, but subject to certain caveats. In most cases, covert surveillance will not be lawful, where employers must ensure cameras are visible, with signs indicating CCTV is in use and the reasons for this.
Last updated: 4 June 2022
Author
Founder and Managing Director Anne Morris is a fully qualified solicitor and trusted adviser to large corporates through to SMEs, providing strategic immigration and global mobility advice to support employers with UK operations to meet their workforce needs through corporate immigration.
She is a recognised by Legal 500 and Chambers as a legal expert and delivers Board-level advice on business migration and compliance risk management as well as overseeing the firm’s development of new client propositions and delivery of cost and time efficient processing of applications.
Anne is an active public speaker, immigration commentator, and immigration policy contributor and regularly hosts training sessions for employers and HR professionals