Wherever a surveillance system is being operated, a company must let people know that they are being recorded under the requirements of GDPR. Individuals have the right to request a copy of any footage in which they are in focus and / or clearly identifiable.
As per ICO recommendations you must let people know that they are in an area where a CCTV system is being operated and who the CCTV system belongs to. The most effective way of doing this is by using prominently placed signs at the entrance to the surveillance zone and then reinforcing with further signs within the area being monitored.
This CCTV sign says:
CCTV - Images are being recorded and monitored for the purpose of crime detection, prevention and public safety. This scheme is operated by: [SPACE FOR COMPANY NAME]. For further information & data access requests contact [SPACE FOR COMPANY DETAILS]. Data is not retained for longer than necessary and is held securely with access limited to authorised personnel.
