Disclosure of images

CCTV images of people are personal data and are covered by the Data Protection Act (DPA), and so is information about people which is derived from images – for example, vehicle registration numbers. Most uses of CCTV by organisations or businesses will be covered by the Act, regardless of the number of cameras or how sophisticated the equipment is.

Individuals are entitled to request copies of CCTV images, these requests are processed under the Data Protection Act as Subject Access Requests or Freedom of Information requests. Both types of request are handled centrally by the University Information Compliance Office in the Council Secretariat. There is no requirement for individuals to refer to either piece of legislation when making their request. Data Protection Office.

Under section 29 of the Data Protection Act 1998 organisations such as the police, government departments and local authorities are able to request access to personal data without the consent of the data subject for the purposes of:

  • The prevention or detection of crime
  • The apprehension or prosecution of offenders
  • The assessment or collection of tax or duty

Section 29 of the Act does not give an automatic right of access to information. The Act states that public bodies can assess the merits of requests and decide whether or not to apply section 29.

The University of Oxford Security Services has procedures in place to process the section 29 requests for OUSS CCTV. Please download the disclosure form CCTV Police Request Form V2 (78kb)

Unfortunately it is not possible to submit the Section 29 disclosure form to Security Services by email.