Short answer: Preserve relevant CCTV through the authorised system process, identify who can approve disclosure, and confirm the recipient and secure transfer method before releasing a copy. Being able to view or export a recording does not automatically authorise someone to share it.
After an incident at a warehouse, office or construction site, requests may reach reception, the gatehouse and the property manager at the same time. A clear procedure prevents those parallel enquiries from becoming uncontrolled copies. Treat preservation, retrieval and disclosure as separate decisions.
Route the request to the right decision-maker
Record who is asking, the organisation they represent, the incident reference and the footage they believe is relevant. Verify contact details through an established channel. A uniform, job title or urgent email is not enough on its own to establish authority.
Identify the organisation responsible for the CCTV and the person authorised to assess requests. That may not be the guarding company, installer or tenant who happens to hold a login. In shared premises, resolve responsibility before telling a requester that a particular team can release recordings.
A person asking for footage of themselves may be making a subject access request, including verbally. Pass that request promptly to the responsible privacy contact under the organisation’s procedure; do not treat every enquiry as an ordinary incident export.
Preserve the relevant material before it is overwritten
Ask an authorised operator to establish whether the relevant recording exists and use the supported preservation process. Keep the request’s scope clear: approximate event time, relevant views and any uncertainty about the recorder’s displayed time. Do not publish camera coverage or retention details in a general incident message.
The government’s police requirements for CCTV systems recommend the ability to protect relevant recordings against overwriting and to export them in the system’s native format without reducing quality. Arrange help from the competent system operator if those functions are unfamiliar. Do not disconnect equipment or remove storage drives to improvise a preservation method.
Give any preserved material an owner and a review point under the applicable retention procedure. Saving relevant footage for a defined incident is not a reason to retain every recording indefinitely. Preserve enough context for the request to be assessed, rather than selecting only a dramatic moment.
Keep the original export distinct from a viewing copy
Agree the export requirements with the investigator or authorised recipient. Check the selected period, camera identifiers, playback and any software needed to view the files. Record the operator, export date and relevant timing discrepancy rather than silently changing a recorder’s clock to make it match another account.
The College of Policing’s CCTV guidance advises obtaining proprietary or native footage where possible. It warns against recording the playback screen with a phone, because that does not capture the original data and can substantially reduce quality.
If a separate converted or redacted viewing copy is needed, keep it clearly distinguished from the retained original export. Avoid presenting an edited clip, screenshot or messaging-app copy as though it were the untouched recording. Seek specialist retrieval support when necessary; this article is not a forensic acquisition procedure.
Approve disclosure separately from preservation
The ICO’s guidance on sharing with law enforcement explains that appropriate sharing can be lawful, but the organisation must identify a lawful basis and assess necessity and proportionality. Some circumstances involve additional conditions, including criminal-offence data. A police request and an overriding legal obligation are not automatically the same thing.
Have the responsible decision-maker assess the actual request. An insurer, contractor or adjoining occupier should not simply receive the same material approved for an investigator. Where authority, scope or the rights of other people are unclear, escalate to the organisation’s data-protection lead or adviser. Do not make a blanket promise to release everything, or a blanket refusal because the recording contains personal data.
Transfer securely and retain a useful disclosure record
The ICO’s surveillance governance guidance calls for controlled disclosure, a record of the recipient and purpose, and a secure transfer method. Use the organisation’s approved route and verify the intended recipient before sending. Do not post footage publicly to seek an identification or distribute it through an informal staff chat.
Keep a concise record linking the request, approval, released files and transfer outcome. Note what remains unresolved and who owns the next action. Restrict that record and the footage to people who need access; the ordinary shift log can reference the controlled incident record without reproducing private details.
Put the responsibilities into the guarding brief
Before cover begins, agree whether officers only report incidents, review images, preserve recordings or perform authorised exports. Specify who provides instruction, who approves release and who handles requests when the usual manager is unavailable. Do not assume every guard has the permissions, training or role-specific licensing needed for every CCTV task.
Our commercial CCTV handover checklist covers questions to settle before accepting a system. When reviewing CCTV support alongside K9 or static guarding, distinguish technical-system work from the guarding assignment. Send the site postcode, proposed duties and relevant requirements so scope and feasibility can be considered without sharing footage or access credentials in the initial enquiry.
This is general operational guidance, not a decision on an individual disclosure or a substitute for legal advice. Confirm the responsibilities and service availability for the particular site.
Featured image: an illustrative CCTV-camera image from the site’s media library. It does not depict a K9 Security Services installation, client premises or incident footage.