CCTV Monitoring

Q133

Policy

We use a camera surveillance system (CCTV) to provide protection and support the health and safety of staff and patients by monitoring incidents or accidents.

We comply with the Privacy Act in using and managing the system, and every effort is made to prevent it impacting on patients' privacy. We ensure that any images captured, collected, and stored are handled in a confidential manner. The CCTV cameras allow a live stream with no audio, and all data (e.g. hard drives) is destroyed or stored to comply with approved data protection standards.

Staff are advised that CCTV cameras are used in sign-posted areas. We use signage to inform patients, whānau, and other visitors that CCTV is operating within the practice facility.

For more information, refer to the Privacy Commissioner: Privacy and CCTV.

Guidelines

• The practice manager is responsible for overseeing the CCTV system.
• Cameras are not installed in sensitive places such as bathrooms or treatment areas.
• Any misuse is reported to the practice manager.
• Any staff incidents or misconduct detected by CCTV will be handled in accordance with our disciplinary procedure.
• The system, its operation, and related policies and procedures are audited and evaluated regularly.

CCTV footage access and storage

• Access is limited to the privacy officer and appointed system managers.
• No images will be used from the CCTV for anything other than stated in the policy.
• No recorded data is taken from the system unless approved in writing by the privacy officer.
• CCTV footage may be released to NZ Police or other relevant authorities with appropriate application documentation or evidence of legal requirements.
• Any formal written request by an individual to view footage related to them will be referred to the privacy officer for consideration. Any request will be limited by the ease of access to the footage and by the need to protect other people’s privacy. Requests will be responded to within 20 days.
• CCTV footage will be retained on the hard drive for approximately 3 months before being overwritten in a continuous recording cycle.

Related policies

Privacy

Disciplinary Process

IT Security

Resources

Privacy Commissioner – Privacy and CCTV: A guide to the Privacy Act for businesses, agencies and organisations

Privacy Act 2020