Healthy,
safe and
productive lives
and enterprises

CCTV Privacy Notice

This privacy notice tells you what to expect if your image is captured on a CCTV camera, under the control of the Health and Safety Authority. These cameras are located at access/ entry points to HSA offices and storage facilities, and also internally within the HSA office buildings, in public areas including stairwells, public corridors and reception areas. CCTV warning signs will always be posted to provide you with information about the operation of a CCTV camera in that location. CCTV cameras will be positioned to minimise capturing images of passer-by’s and to avoid capturing workstations.

Health and Safety Authority

The Health and Safety Authority is the Data Controller for the CCTV images unless stated otherwise on the local CCTV warning sign, this might arise where offices are shared with another agency or landlord.  Our contact details are listed below:

Health and Safety Authority

The Metropolitan Building James Joyce Street Dublin 1

D01 K0Y

Telephone: 0818 289 389

Email: contactus@hsa.ie

DPO contact details

If you wish to contact our Data Protection Officer in relation to the processing of your personal data, you can do so by using the contact details above or by e-mailing dpo@hsa.ie

Legal Basis for Processing CCTV Images

The Health and Safety Authority relies on legitimate interest as the legal basis for processing personal data recorded on CCTV systems. The Authority has a legitimate interest in ensuring the health and safety of its staff and safety guarding access to buildings and assets under its control. It also has a legitimate interest in safe guarding equipment stored remotely where CCTV can act as a deterrent to crime or unauthorized access.

Purpose of Processing

The Health and Safety Authority processes CCTV images for the following purposes;

  • To ensure safety of staff in remote locations where staff are likely to need access, eg basement car park or storage facilities
  • To grant access or permit entry to staff where building access is provided through locked or security controlled doors.
  • To ensure staff safety and to deter criminal damage or theft by placing CCTV on public access points to offices, storage facilities and on ICT rooms containing high value network and information infrastructure and hardware.
  • To determine if an unauthorized entry to a HSA building or facility has occurred, where a security alarm is triggered or other suspicions activity is notified.

Recipients of this Data

CCTV footage is not shared outside of the HSA. However, we work with CCTV Security Providers, who are designated as Data Processors. Where Processors have access to our data, they can only access and process the data under our clear instructions and must sign a written contact with strict data protection clauses.

Disclosure of Personal Data to Third Parties

We will not disclose your personal data to anyone else except, where it is in the legitimate interest of the organisation arising from an incident investigation or where you have consented to the disclosure, or where we are obliged by law to disclose the data.

Retention of CCTV Images

The data captured from the CCTV cameras is securely stored as electronic data. Typically, this data is recorded on a loop and will be retained for maximum of 30 days. It will be over-written after that period. However, data may be retained for longer periods where the events captured give rise to legal proceedings.

Your Data Protection Rights

You have the following rights in relation to the processing of identifiable CCTV images of you by the HSA;

  • The right to be informed about the processing of your personal data;
  • The right to access your personal data;
  • The right to erasure of your personal data;
  • The right to object to processing of your personal data;
  • The right to restrict processing of your personal data;

If you require further information in relation to your data subject rights or if you wish to request a copy of your personal data, you can contact our Data Protection Officer (DPO) at dpo@hsa.ie

If you are seeking a copy of your data, you will need to provide photo-identification so we can verify your identity. We will respond to access request as soon as possible but no later than 1 month from receipt of your request.

Your Right to Complain

In the event that you wish to make a complaint about how your personal data is being processed by the Health and Safety Authority or how your complaint has been handled, you have the right to lodge a complaint directly with the Data Protection Commission at:

Data Protection Commission

21 Fitzwilliam Square South

Dublin 2

D02 RD28

Ireland

+353 (057) 868 4800 / (076) 110 4800

Email: info@dataprotection.ie

Changes to Our Privacy Notice

This Privacy Notice is kept under regular review and is therefore subject to change.

Date Published: 21/11/2023