New ICO guidance on using personal data to deter crime

The Information Commissioner's Office (ICO) has published new guidance aimed at helping small retailers use personal information to protect their premises, staff and others from crime. Although written with retailers in mind, the message is highly relevant for charities operating shops, community premises and schools using CCTV in publicly accessible areas. 

The key point is that data protection law does not prevent organisations from using CCTV or other personal information to deter theft, violence, anti-social behaviour or unauthorised access. For charities operating physical premises and shops, this is a useful prompt to check that CCTV notices and staff procedures are up to date. 

Importantly, the guidance recognises that organisations may need to use information internally to protect people and property. For example, a charity shop may need to alert appropriate managers or staff to a recent incident, preserve footage after a theft, or review CCTV following aggressive behaviour towards volunteers. Where external sharing is required, such as with the police or other appropriate bodies, the ICO's message is that data protection law can facilitate this, provided it is necessary, proportionate and well documented.