CCTV is used across HSE facilities to support safety, security and the protection of people and property.
Policy purpose
The HSE uses CCTV to help keep people and property safe. It supports the safety and security of staff, service users, patients, visitors and the public. It also helps protect HSE buildings, HSE fleet vehicles and other assets. The policy sets out how CCTV must be used in line with data protection law and HSE guidance.
HSE CCTV National Policy (PDF, 443 KB, 18 pages)
Who this policy applies to
The policy applies to anyone who may be recorded on CCTV while on HSE premises.
This includes:
- staff
- service users
- patients
- visitors
- volunteers
- contractors
Where CCTV is used
CCTV is used in areas where it is needed to support safety and security.
Cameras may be placed in areas such as:
- entrances
- corridors
- waiting areas
- car parks
- HSE fleet vehicles
Cameras should be visible and positioned only where needed.
CCTV access must be restricted to authorised staff.
CCTV equipment and maintenance
CCTV equipment must be kept in good working order.
CCTV systems must:
- be maintained on a scheduled basis
- be checked to ensure cameras are working and views are not obstructed
- record accurate date, time and location information
Unauthorised recording
HSE employees are not allowed to use covert CCTV.
Privately-operated CCTV or recording devices are not permitted on HSE premises. Staff, service users and visitors must not use or install any devices. The HSE will remove unauthorised CCTV or similar devices.
Data retention
The retention period for CCTV footage is 30 days. After this, the footage is normally overwritten. Footage may be kept for longer if it is needed for an investigation or a legal process.
Access to CCTV footage
Only authorised staff may access or view CCTV footage.
Requests for footage for internal investigations must be made in writing and approved at General Manager level or above.
Individuals may request access to CCTV footage where they are identifiable through the HSE Subject Access Request process.
Requests from An Garda Síochána or other third parties must follow HSE data protection procedures. Disclosures must be documented and limited to what is needed.
Unauthorised access or disclosure is managed under the HSE data breach process.
CCTV signage
Clear signage will tell people that CCTV is being used. Signage is usually placed at entrances and in relevant areas.
Contact
For data protection queries, email dpo@hse.ie or contact your local Data Protection Office.