CCTV in Cornwall care homes: what CQC and the ICO expect
Cameras in a care setting sit where safety, dignity and data protection meet. Get the scope and the paperwork right and the system helps you. Get them wrong and it becomes the thing you have to explain.
Where cameras belong, and where they do not
Communal areas, entrances, corridors, car parks, bin and delivery areas: all defensible, all straightforward. Residents' bedrooms and bathrooms are a different matter entirely. Surveillance in a private space is only ever justifiable case by case, with a documented lawful basis, a data protection impact assessment, and the resident or their representative properly involved. It is not something to roll out across a home.
This is general guidance rather than legal advice. The ICO publishes clear, readable material on surveillance and on care settings specifically, and it is worth reading before any kit is specified.
The paperwork is part of the installation
A camera system in a regulated setting is not finished when the last cable is terminated. What an inspector or a family member asks about is the decision trail: why these positions, what the retention period is, who can view footage, how requests are handled and who signed it off.
- A data protection impact assessment before installation, not after
- Signage at every entrance, in plain language
- A written retention period, enforced by the recorder
- A named person responsible for access to footage
- A tested process for handling a footage request
Retention: pick a number and make the system honour it
The commonest finding is not that a home kept too little footage. It is that nobody knows how long the recorder is keeping it, because retention was never set and the disk simply overwrites when it fills. Choose a period that matches why the cameras are there, write it down, and configure the recorder to match. Around a month suits most homes.
The network matters more than the cameras
Cameras belong on their own network segment, separated from clinical systems, care records, staff devices and visitor Wi-Fi. A flat network where a visitor device and a nurse call system share a subnet is a problem waiting for an audit, and it is usually the result of a system that grew one device at a time rather than a decision anybody made.
Default passwords are the other recurring finding: cameras shipped with a factory login, installed with that login intact, and occasionally with the credentials on a label stuck to the housing. It happens more often than anyone admits. Trivial to fix at installation, awkward afterwards.
Answering a footage request
At some point a family, the police or the regulator will ask for footage of a specific time and place. The test is whether you can find it, export it, redact other identifiable people where needed, and record what was released. A system nobody has ever exported from is a system that will fail that test.
Straight answers.
Can we put cameras in residents' rooms?
Only in exceptional, individually assessed cases with a documented lawful basis, a data protection impact assessment and the involvement of the resident or their representative. It is never a default. Communal areas, entrances and external areas are the normal scope.
How long should we keep the footage?
Long enough to be useful and no longer. Around 30 days suits most homes. The point is that the period is chosen deliberately, written down and actually enforced by the recorder rather than left at whatever it shipped with.
What happens when somebody asks for footage?
A family member or regulator can request footage. You need to be able to find it, export it, redact other people where required and record what you released. If that process has never been tested, it will fail on the day it matters.
Related services
Have a site that needs sorting?
Send the location, the problem and a couple of photos of the existing router, cabinet or problem area. You get a straight answer and, where it can be scoped, a fixed price.