• Section 1 - Purpose and Scope
• Section 2 - Definitions
• Section 3 - Policy Statement
• Installation and Method of Operation
• Responsibility
• Installation
• Signage
• Monitoring
• Obtaining authorised access to data
• Complaints
• Section 4 - Procedures
• Monitoring (Operation)
• Disposal
• Training

Section 1 - Purpose and Scope

(1) The Closed Circuit Television (CCTV) Policy establishes the principles and operational procedures for the installation and use of CCTV by Southern Cross University.

(2) This Policy applies to all University staff and students. It also applies to contractors, service providers, clients, customers and visitors.

(3) This Policy does not apply to any recording or screening of lectures by the University.

Section 2 - Definitions

(4) The following definitions apply to this Policy:

1. Closed Circuit Television (CCTV) means any combination of cameras, lenses, video/digital recorders and/or accessories installed for the purpose of monitoring and or recording visual activity.
2. Authorised User means a person authorised by the Vice President (Operations), or their nominee and contracted security personnel.

Section 3 - Policy Statement

(5) The University is committed to providing a safe and secure learning and working environment. Where necessary and appropriate the University will use CCTVs to protect people and assets in and around university property, while also respecting and protecting the individual's right to privacy. The use of CCTV is part of an integrated security approach that includes a number of strategies, including access controls, lighting, alarms and security staff.

Installation and Method of Operation

(6) Use of CCTVs is strictly restricted to activities which are:

1. reasonably necessary;
2. for lawful purposes; and
3. directly related to the University's functions or activities.

Responsibility

(7) The Vice President (Operations) is responsible for the overall management of the University's CCTVs and has authority to amend or review the network from time to time.

Installation

(8) The following conditions apply to the installation of CCTVs:

1. The approval of the Vice President (Operations) must be obtained before the installation of a new camera;
2. CCTV cameras can only be installed by persons who are appropriately licensed under any relevant legislation,and approved by the Director, Property Services.
3. CCTV cameras must not be hidden and must not be located.
   1. so as to capture images from private property adjacent to the University; or
   2. in any change room, toilet facility, shower or other bathing facility.
4. All CCTV controls, monitors and recorders must be located in a secure area.
5. Access to CCTV cameras will be limited only to Authorised Users.
6. All CCTV equipment will be integrated into the University's wider electronic security network to enable effective monitoring by the University's security services.

Signage

(9) Signage indicating a CCTV system is in operation will be displayed at common entry points to each University campus and other high volume traffic areas.

(10) The signage will:

1. be located within normal eye range, be clearly visible, distinctive, and located in a position that is well lit;
2. convey clearly that CCTV cameras are in place, preferably with the CCTV symbol; and
3. have been pre-approved by the Privacy Contact Officer as compliant with the requirements of the Privacy and Personal Information Protection Act 1998.

Monitoring

(11) The University CCTV control room will be staffed by Authorised Users.

(12) The Security Supervisor, or their nominee, will ensure Authorised Users are aware of the University's policy and procedure before commencing work with the CCTV system.

(13) Access to the control room will be restricted to persons having a lawful and legitimate need of access. Individuals require prior approval of the Vice President (Operations) is required to gain access to the control room, with the exception of:

1. Authorised Users;
2. cleaning staff; and
3. law enforcement officers (refer clause(18)).

(14) Authorised Users must act with the utmost probity. The tracking or zooming in on any person must not be undertaken in a gratuitous or unreasonable manner. Camera operation is subject to audit and monitor operators may be called upon to explain their interest in a particular person.

(15) CCTV recorded information must be:

1. used only for the purpose for which it was approved to be collected (or as otherwise authorised or required by law);
2. stored securely on a secure University computer server;
3. accessed only by Authorised Users;
4. restricted by user ID and password authentication (i.e. the use of generic user IDs, passwords or sharing of user IDs and passwords is not permitted);
5. clearly auditable and allow for the identification of individuals accessing the recorded information;
6. retained for a minimum of 30 days;
7. disposed of in a secure manner; and
8. protected from unauthorised access, use or disclosure.

(16) The Director, Property Services will be responsible for monitoring compliance with the CCTV Policy and will report annually to the Vice President (Operations) regarding the use and management of the CCTV system.

Obtaining authorised access to data

(17) Images may be released to the Police Service or other law enforcement agencies in compliance with relevant legislation. All requests made by the Police Service or other law enforcement agencies should be referred to the Security Supervisor who will advise the University Privacy Officer of the request and its result using the Law Enforcement Information Access Form.

(18) The University may release images and/or recordings to third parties, other than law enforcement, but will only do so if authorised or required to by the Privacy and Personal Information Protection Act 1998. All other requests to view recorded information will be assessed in accordance with that Act and the Privacy Management Plan.

Complaints

(19) Privacy related CCTV complaints will be managed in accordance with the Privacy Management Plan.

(20) All other complaints will be managed in accordance with:

1. Complaints Policy - Students and Members of the PublicComplaints Policy - Students and Members of the Public
2. Complaints Policy – Staff

Section 4 - Procedures

Monitoring (Operation)

(21) The CCTV system will generate a live feed which will be visible in the control room. The control room will be used only for the purpose of monitoring the CCTV system and access is restricted as per clause (13). Access to the control room will be with a personally coded swipe card.

Disposal

(22) Recordings and data produced by the CCTV system will be retained for a period of 30 days. The Director, Property Services may determine to retain recordings, and data produced by the CCTV system for more than 30 days where it is allowable to do so under this Policy and the Privacy Management Plan. Other than that, CCTV footage is automatically overwritten after 30 days.

Training

(23) All security officers at the University will receive training with regards to the capabilities of the CCTV system installed. This training will include:

1. camera locations;
2. the responsibilities of Authorised Users when viewing recordings and making recommendations regarding further review;
3. this Policy;
4. the Privacy Management Plan; and
5. all relevant legislation.