PassEveryTest
Italiano

CCTV and Data Protection Course (UK) 2026

This course is for security officers, CCTV operators and supervisors in the UK who work with cameras and recorded footage. It covers the UK GDPR, the Data Protection Act 2018, ICO guidance, the Surveillance Camera Code, subject access requests and data breaches. It is background knowledge only: some contracted CCTV work needs an SIA licence, and this course does not replace SIA licence training.

  • Corso
  • Regno Unito
  • 25 domande
  • Verificato: 13 ottobre 2026

In breve

Questo corso gratuito ha circa 30 minuti di lezioni e un test di 25 domande. Con l’80% o più puoi scaricare un attestato di completamento (privato, non accreditato). Verificato sulle fonti ufficiali in data 13 ottobre 2026.

Inizia dalle lezioniCCTV and Data Protection Course (UK): Lessons: circa 30 minuti di lettura. Ogni domanda del test è trattata nelle lezioni.

Cosa imparerai

  • Explain how the UK GDPR and the Data Protection Act 2018 apply to CCTV
  • Apply the data protection principles to cameras, signs, audio and retention
  • Describe when a DPIA is needed and who the controller is
  • Know where the Surveillance Camera Code applies and when an SIA CCTV licence is needed
  • Handle subject access requests and police requests correctly
  • Recognise misuse of footage and report data breaches on time

Ottieni almeno l’80% per scaricare il tuo attestato.

  1. Domanda 1 di 25

    A member of the public wants to complain about how a shop uses its CCTV. Which body deals with data protection in the UK?
    Mostra la risposta

    Risposta: C. The Information Commissioner's Office

    The ICO is the UK's data protection regulator. Its video surveillance guidance covers CCTV used by organisations under the UK GDPR and the Data Protection Act 2018.

  2. Domanda 2 di 25

    A camera records clear pictures of shoppers who can be recognised. What are these images under data protection law?
    Mostra la risposta

    Risposta: D. Personal data about the people shown

    The ICO says images and voices of people who can be identified are their personal information, so data protection law applies.

  3. Domanda 3 di 25

    Which data protection principle means footage must not be kept for longer than it is needed?
    Mostra la risposta

    Risposta: C. Storage limitation

    Storage limitation is one of the principles in Article 5 of the UK GDPR. Data must not be kept longer than needed for its purpose.

  4. Domanda 4 di 25

    A camera only needs to watch a car park entrance, but it also films a bus stop across the road. Which principle is most at risk?
    Mostra la risposta

    Risposta: D. Data minimisation

    Data minimisation means collecting only what you need for your purpose. Filming an extra public area is more than the purpose needs.

  5. Domanda 5 di 25

    Your manager says the law requires all CCTV footage to be kept for exactly 31 days. What does the ICO say?
    Mostra la risposta

    Risposta: D. The law sets no fixed minimum or maximum

    The ICO says the UK GDPR and the DPA 2018 do not set a minimum or maximum retention period. Keep footage for the shortest time your purpose needs.

  6. Domanda 6 di 25

    According to the ICO, what should a CCTV sign usually tell people?
    Mostra la risposta

    Risposta: C. Who runs it, why, and how to contact them

    ICO guidance says signs should be clear and readable and give the operator, the purpose and basic contact details, such as a website, phone number or email.

  7. Domanda 7 di 25

    A new CCTV system can also record sound. What does the ICO recommend?
    Mostra la risposta

    Risposta: D. Keep audio off by default, for rare use only

    The ICO says audio should be switched off by default and used only in exceptional cases, for example with a trigger switch.

  8. Domanda 8 di 25

    The ICO gives an example of when the date and time stamp on recordings may become wrong. What is it?
    Mostra la risposta

    Risposta: A. When the clocks change for summer or winter time

    The ICO asks for regular checks that the date and time stamp is accurate and gives the clock change between summer and winter time as an example.

  9. Domanda 9 di 25

    When should a data protection impact assessment (DPIA) be done for a surveillance system?
    Mostra la risposta

    Risposta: A. Before using a system likely to be high risk

    The ICO says a DPIA should be done before deploying a surveillance system that is likely to result in a high risk to people.

  10. Domanda 10 di 25

    A DPIA shows a high risk that cannot be reduced. What must happen before the processing starts?
    Mostra la risposta

    Risposta: A. The ICO must be consulted

    If high risks cannot be reduced, the organisation must consult the ICO before it starts the processing.

  11. Domanda 11 di 25

    Which lawful basis does the ICO say is most likely for CCTV run by a private company?
    Mostra la risposta

    Risposta: B. Legitimate interests

    The ICO says the lawful basis for surveillance will usually be legitimate interests, or public task for public bodies. Consent is hard to get in public spaces.

  12. Domanda 12 di 25

    Under data protection law, who is the controller of a CCTV system?
    Mostra la risposta

    Risposta: A. Whoever decides why and how footage is used

    The controller decides the purposes and means of the processing and is legally responsible for following data protection law.

  13. Domanda 13 di 25

    Where does the Surveillance Camera Code of Practice apply?
    Mostra la risposta

    Risposta: D. England and Wales

    The code is made under the Protection of Freedoms Act 2012 and applies to public places in England and Wales. Scotland and Northern Ireland are not covered.

  14. Domanda 14 di 25

    Who must have regard to the Surveillance Camera Code of Practice?
    Mostra la risposta

    Risposta: A. Relevant authorities, like police and councils

    Section 33 of the Protection of Freedoms Act 2012 says relevant authorities, such as the police and local authorities, must have regard to the code. Others are encouraged to follow it.

  15. Domanda 15 di 25

    Which document sets out principles for public space CCTV in Scotland?
    Mostra la risposta

    Risposta: D. The CCTV Strategy for Scotland (2011)

    The ICO notes that the Scottish Government's CCTV Strategy for Scotland (2011) sets out principles for public space CCTV operators.

  16. Domanda 16 di 25

    A contracted operator watches CCTV to guard against disorder and protect people from assault. Which SIA licence covers this?
    Mostra la risposta

    Risposta: D. Public Space Surveillance (CCTV)

    The SIA says a CCTV licence is needed to use CCTV to watch or identify people in order to guard against disorder or protect people from assault.

  17. Domanda 17 di 25

    A licensed door supervisor uses a CCTV screen only to spot a trespasser and protect property. What does the SIA say?
    Mostra la risposta

    Risposta: D. Their door supervisor licence covers this

    The SIA says door supervisor, close protection and security guarding licences cover using CCTV to identify a trespasser or protect property.

  18. Domanda 18 di 25

    A contracted officer wears a body camera but never watches any of its footage. Does this need a CCTV licence?
    Mostra la risposta

    Risposta: D. No, not for wearing it without viewing

    The SIA says you do not need a licence if you wear a bodycam or headcam but do not watch any of its footage.

  19. Domanda 19 di 25

    How long does an organisation normally have to answer a subject access request?
    Mostra la risposta

    Risposta: B. One month

    The ICO says a subject access request must be answered without undue delay and at the latest within one month of receiving it.

  20. Domanda 20 di 25

    When can the time to answer a subject access request be extended by up to two more months?
    Mostra la risposta

    Risposta: C. If it is complex or the person sent several

    The time limit can be extended by up to two further months if the request is complex or the person has made several requests. The person must be told within one month.

  21. Domanda 21 di 25

    A visitor tells you at reception that they want a copy of CCTV footage of themselves. How should this be treated?
    Mostra la risposta

    Risposta: A. As a valid request, even though it was spoken

    The ICO says a request can be made verbally or in writing, and no special words are needed. Pass it on using your site procedure.

  22. Domanda 22 di 25

    Footage asked for in a subject access request also shows other people. What does the ICO say?
    Mostra la risposta

    Risposta: A. Others need not be shown unless they agree or it is reasonable

    The ICO says you do not have to give information that reveals another person unless they consent or it is reasonable to disclose it without consent.

  23. Domanda 23 di 25

    An operator copies footage of a fight onto their own phone to post online, without the company agreeing. What is this?
    Mostra la risposta

    Risposta: A. A possible offence under section 170 of the DPA 2018

    Section 170 of the Data Protection Act 2018 makes it an offence to knowingly or recklessly obtain or disclose personal data without the consent of the controller.

  24. Domanda 24 di 25

    A laptop holding CCTV footage is stolen, and the breach is likely to put people at risk. When should it be reported to the ICO?
    Mostra la risposta

    Risposta: C. Within 72 hours of becoming aware of it

    A reportable breach must be reported without undue delay and no later than 72 hours after the organisation becomes aware of it.

  25. Domanda 25 di 25

    How does the ICO say exemptions, such as the one for preventing and detecting crime, should be used?
    Mostra la risposta

    Risposta: B. Case by case, with the reasons recorded

    The ICO says each exemption must be considered case by case, not as a blanket rule, and the reasons should be documented.

Cosa sapere prima del test

  • UK data protection law does not set a fixed retention period for CCTV. Keep footage only as long as your purpose needs.
  • The ICO says CCTV audio should be switched off by default and used only in exceptional cases.
  • A subject access request must be answered within one month. It can be extended by up to two more months if it is complex.
  • A reportable data breach must be reported to the ICO within 72 hours of becoming aware of it.
  • The Surveillance Camera Code applies in England and Wales. Police and local councils must have regard to it.
  • Contracted staff who use CCTV to guard against disorder or protect people from assault need an SIA CCTV licence.

Domande frequenti

Do I need an SIA licence to work as a CCTV operator?

If you work under a contract for services and use CCTV to watch or identify people to guard against disorder or protect people from assault, the SIA says you need a Public Space Surveillance (CCTV) licence. This course does not give you a licence or replace licence training.

How long can CCTV footage be kept?

The law sets no fixed period. The ICO says to keep it for the shortest time your purpose needs and then delete it.

Can someone ask for CCTV footage of themselves?

Yes. This is a subject access request. It can be made in writing or verbally, and it must usually be answered within one month.

Can I give footage to the police?

Often yes, but follow your site procedure. Exemptions for preventing and detecting crime are decided case by case, and the disclosure and reasons should be recorded.

L’attestato è accreditato o riconosciuto ufficialmente?

No. È un attestato di completamento privato, solo per le tue conoscenze. Non è riconosciuto, accreditato né approvato da alcun governo, ente di rilascio delle licenze, autorità di regolamentazione o istituto di istruzione e non sostituisce alcuna licenza, certificazione o formazione richiesta dalla legge.

Fonti

Test correlati