Romark,
Forget about RIPA, forget it totally- you are not acting on behalf of a Public Body. As you are in the 'profession' I am guessing that you are registered with the DPA. If you are not, you are acting illegally.
However, I would take a close look at the Data Protection Act, especially Section 36, here's a few pointers, don't know if it is of any use
In simple terms, here's an extract from a forthcoming book...
Data Protection Act 1998
The Data Protection Act 1998 came into force on 1st March 2000. It sets rules for processing personal information and applies to some written paper records as well as those held on computers. The Act applies to ‘personal data’ that is about identifiable living individuals.
The Data Subject’s Rights
The reason and concept of the Data Protection Act was to partially provide some sort of fairness and security for the ‘Data Subjects’ or ‘us’, the general public. As so much information is being stored and processed by many organisations, it was deemed that this information should be kept accurate, truthful and fair. The Act also makes provision for the ‘Data Subject’ so that he or she is able to find out what information is held about themselves on computer and/or on paper files. This is known as the ‘right of subject access’.
The Act also allows individuals to apply to the Court to order a Data Controller to rectify, block, erase or destroy personal details if they are inaccurate or contain expressions of opinion which are based on inaccurate data.
Access to information and data held about you
Any person can apply for a copy of the information held about them. Requests must be made to the person or organisation (Data Controller) who you think processes the information to which you want access. You must apply in writing and must be accompanied by the appropriate fee of £10.00 and proof of your identification. The Data Controller should respond within 40 days of receiving your request.
Individuals are entitled to be told if any personal data is held about them and if so:
• To be given a description of the data
• To be told for what purposes the data is used
• To be told the recipients to whom the data may have
been disclosed
You are also entitled:
• To be given a copy of the information with any unintelligible terms explained
• To be given any information available to the controller about the source of the data
Theoretically speaking, if a target of surveillance were to find out which investigation agency or person has them under surveillance, they would be legally entitled to view any information or data (surveillance logs, video tapes) that has been obtained about them. There are various exceptions to this rule which includes surveillance by a public body. So if you get compromised, ensure that the target does not identify you and keep your fingers crossed that he is unaware of the DPA!
Again, this subject can be a minefield, the Data Protection website is very clear and helpful. To register you have to notify that you are a Data Controller by submitting the relevant forms with a fee of £35.00 per year. Failure to do so is a criminal offence and can result in a fine and/or imprisonment.
Data Protection Act in Relation to Covert CCTV
The DPA takes into account the use of domestic CCTV systems for your own private security and does not expect every householder to register with them. However, the Act gives certain exemptions to the above eight enforceable principles for a CCTV camera mounted on private and domestic property.
Section 36 of the DPA states that:- Personal data processed by an individual only for the purposes of that individual's personal, family or household affairs (including recreational purposes) are exempt from the Data Protection Principles.
If a person enters the property covered by CCTV the owner does not need to put up notices stating that the person is entering a CCTV covered area. Nor is he required to provide a copy of the film he has taken to the Data Subject if they make a formal request.
However, if that CCTV camera picks up images outside the premises, such as a pedestrian walking past, or a camera overlooks his neighbours garden then the above eight principles have to be considered and a sign put up.
However, if your camera is covert, Part 1 of the DPA CCTV Code of Practice states:
In exceptional and limited cases, if it is assessed that the use of signs would not be appropriate, the user of the scheme must ensure that they have:
a)Identified specific criminal activity.
b)Identified the need to use surveillance to obtain evidence of that criminal activity.
c)Assessed whether the use of signs would prejudice success in obtaining such evidence.
d) Assessed how long the covert monitoring should take place to ensure that it is not carried out for longer than is necessary.
e) Documented (a) to (d) above.
Information so obtained must only be obtained for prevention or detection of criminal activity, or the apprehension and prosecution of offenders. It should not be retained and used for any other purpose. If the equipment used has a sound recording facility, this should not be used to record conversations between members of the public.
Therefore you are able to install covert CCTV so long as you comply with the above codes of practise and the enforceable principles of the DPA.
Cheers
Peter
ISS Training Ltd