Would the surveillance require you to contact individuals in ways which they may find intrusive? If a PIA is deemed necessary, then complete the 6 steps below: Step One: Identify the need for a PIA explain what the project aims to achieve, what the benefits will be to the organisation, to individuals and to other parties linking to other relevant documents related to the project, for example a project proposal will be helpful summarise why the need for a PIA was identified (this can draw on your answers to the screening questions) Step Two: Describe the information flows The collection use and deletion of personal data should be described here, and it may also be useful to refer to a flow diagram or another way of explaining data flows. You should also say how many individuals are likely to be affected by the project. Consultation requirements Explain what practical steps you will take to ensure that you identify and address privacy risks Who should be consulted, internally and externally? How will you carry out the consultation? You should link this to the relevant stages of your project management process Consultation can be used at any stage of the PIA process. Step Three: identify the privacy and related risks Identify the key privacy risks and the associated compliance and corporate risks. Larger-scale PIAs might record this information on a more formal risk register. Annex three can be used to help identify the DPA related compliance risks. Privacy issue Risk to individuals Compliance risk Associated organisation / corporate risk Step Four: Identify privacy solutions
Would the surveillance require you to contact individuals in ways which they may find intrusive? If a PIA is deemed necessary, then complete the 6 steps below: Step One: Identify the need for a PIA explain what the project aims to achieve, what the benefits will be to the organisation, to individuals and to other parties linking to other relevant documents related to the project, for example a project proposal will be helpful summarise why the need for a PIA was identified (this can draw on your answers to the screening questions) Step Two: Describe the information flows The collection use and deletion of personal data should be described here, and it may also be useful to refer to a flow diagram or another way of explaining data flows. You should also say how many individuals are likely to be affected by the project. Consultation requirements Explain what practical steps you will take to ensure that you identify and address privacy risks Who should be consulted, internally and externally? How will you carry out the consultation? You should link this to the relevant stages of your project management process Consultation can be used at any stage of the PIA process. Step Three: identify the privacy and related risks Identify the key privacy risks and the associated compliance and corporate risks. Larger-scale PIAs might record this information on a more formal risk register. Annex three can be used to help identify the DPA related compliance risks. Privacy issue Risk to individuals Compliance risk Associated organisation / corporate risk Step Four: Identify privacy solutions
CCTV-CODE-OF-CONDUCT.docx