Speech

Keynote speech to the CCTV user group conference

The commissioner鈥檚 keynote speech to the user group conference looked back his first year in office and the challenges ahead.

Tony Porter

Good morning and thank you to the User Group for inviting me to give the keynote speech today.

Some of you may have heard me speak at this conference last year 鈥� new into my role and green behind the ears but I must have said something right to be invited back a second time!

So, I鈥檓 delighted to be asked to speak again to an expert group who can help shape the future regulatory landscape of CCTV. But before I look to the future I want to look to the past.

By the past I mean my past, what I have been doing since I was appointed to this role a year ago.

When I was appointed I was keen to build up a good understanding of the industry from manufacturer to installer to end user as well as members of the public. To do this I spent much of my first year 鈥榦n the road鈥� on visits or speaking at events like this.

The time I鈥檝e invested in doing this has been invaluable to help me understand the issues and challenges facing the industry. I鈥檓 working actively with the industry and through my Advisory Council and Standards Board 鈥� which the User Group are represented on 鈥� to start to address these.

I鈥檝e been working with relevant authorities under the Protection of Act 鈥� Police Forces and Local Authorities. Working with them to meet their legal requirement and adopt the guiding principles in the code of practice.

I鈥檝e been looking beyond relevant authorities too and have been speaking to universities, banks and residential social landlords to name a few about voluntarily adopting the code. And I鈥檝e been speaking to manufacturers and installers too.

I have issued tools and guidance. I launched a self assessment tool in November 鈥� an easy to complete tool for users of CCTV to see how closely they are complying with the 12 guiding principles and identify what more they may need to do. It can be saved and published as a document on organisations鈥� websites 鈥� I鈥檓 sure you鈥檝e all completed it?! And in March I published a list of relevant technical standards on my website on 188体育 fulfilling one of my statutory requirements 鈥� more of this in a moment.

Findings

So, what I have found out on my travels?

As I just mentioned the Protection of Freedoms Act places a statutory requirement on relevant authorities such as Police Forces and Local Authorities to pay due regard to the code.

I鈥檝e seen great examples of how these organisations are going about meeting this requirement. In Essex a parking partnership have rolled out Body Worn Video to traffic wardens to combat physical and verbal abuse 鈥� almost 260 incidents in two years.

To me there does seem to be an obvious pressing need here and my team worked with them to ensure that what they are doing is code compliant.

They have in place a privacy impact assessment, have ensured that any data captured is secure and can鈥檛 be tampered with and have trained users to make sure they tell people when and why they are recording. I will be speaking to them shortly to see if the deployment of this technology has had resulted in a decline of attacks on their wardens.

Elsewhere, I鈥檝e seen great examples in Birmingham and Sedgemoor in Somerset of Local Authorities carrying out reviews of their town centre CCTV systems leading to the removal of ineffective cameras and cost savings.

Austerity

And the need to make savings is a key issue for all Local Authorities. The User Group has accused me in the past of not understanding the level of cuts facing parts of its membership. This is an accusation I reject completely. I fully understand that public sector organisations are still in the maelstrom of challenging financial times. In this financial year alone (2015-16) councils in the UK will have to find 拢2.6 billion of savings 鈥� a mind-boggling figure! Local Authorities have told me time and again the challenges they face, that we鈥檙e still in an economy where savings must be made in nearly every aspect of the services provided to the public. Public space CCTV in the UK is not a statutory function that Local Authorities must provide. I am now beginning to see evidence that councils are looking at reducing or already have reduced their CCTV provision.

I鈥檝e seen councils in large towns like Blackpool and Derby stop monitoring their systems twenty-four seven. My understanding is that this is not as the result of a review or public consultation but simply to save money. And as austerity measures continue to bite on public space CCTV will we see a deterioration of standards and training. One CCTV manager has told me financial constraints are leading local authorities to take measures that are threatening the levels of CCTV expertise within them. CCTV managers鈥� roles are being cut and supervisors with little or no knowledge of CCTV are being left to report to senior managers.

This is a worrying situation.

I am also concerned about the level of knowledge that Local Authorities have about the totality of public space surveillance cameras controlled by their organisation. And if they are all code compliant 鈥� remember that is a legal requirement.

I am sure that most town centre public space CCTV is inline with the code or fairly close. But I recently asked a large city centre council to do a survey of all public space surveillance cameras within it. What has come back is quite shocking but not unexpected.

Outside of the domain of the CCTV manager cameras are being used by traffic management, waste management, housing and environmental services.

I am sure that this kind of thing is happening in Local Authorities across the UK 鈥� breaches of the code that they have a legal requirement to pay due regard to.

No privacy impact assessments, no regular reviews and no familiarity of the code at all!

Elsewhere, I was recently contacted by a councillor who was concerned about a proposition for all taxis to have CCTV installed with no operational requirement, regard for the code or the ICO involvement in Southampton a few years ago So, there is still a huge challenge to get all parts of Local Authorities code compliant but it鈥檚 one that I鈥檓 determined to overcome. I will continue to offer advice on how to comply with the code and where necessary meet minimum standards.

Standards

But the standards framework is horribly complex how do you know which standards are relevant? Well, I have published a list of relevant standards on my website. It sets out in plain English what each standard is and links through to the standards on BSI site should you wish to buy them.

This was not an insignificant a piece of work to get it simplified to this level which took my standards board a couple of months. The User Group are on my standards board and fed in views on your behalf but the feedback we鈥檝e had from you (on behalf of the User Group) is that what we鈥檝e done is still too complex!!

If anyone has any thoughts on what more I need to do please let me know.

I know that some councils are meeting BS7958 which you will all know is the British Standard for operating CCTV in a control room. Attaining this standard really demonstrates that you have a well run control room but only a handful of councils have achieved this standard, around 2 to 3 per cent.

Yes 鈥� these standards do cost money and as I just said the public sector in particular is still feeling the pressure of the recession. Although, I鈥檓 told that if you wanted to pay for all the possible standards you could have in relation to a CCTV control room it would cost 拢1,402.00 (or 拢701.00 if the organisation is a member of the BSI). That is not to say that every standard needs to be purchased.

Obviously there is also the requirement of time and staff resource to facilitate the visit to check you鈥檙e meeting the standard.

But to my mind that is not a huge amount 鈥� how much has your organisation paid to be here today or to be a member of this Group? I鈥檓 not suggesting for one minute that being a member of this Group is not money well spent 鈥� it is.

But is not meeting a certain standard money well spent and sharing that information with the public so they know the system protecting them is effective and efficient.

It鈥檚 somewhat ironic that where BS7958 is being met it is mostly where a Local Authority is contracting in an organisation to run their CCTV operation 鈥� to ensure they meet a certain standard!

And I鈥檓 not in the camp that thinks CCTV managers must know the detail of every standard and a number may not be relevant depending on your set up.

I was speaking to a public space CCTV manager a few weeks ago who said to me that there was no way he would be able to or need to know the details of all possible relevant standards. He needs an overview of the standards and be able to put trust in others that they are being met.

Whilst there are some that will want to know the minute detail of every standard I don鈥檛 believe we need a sector full of technocrats. I completely get that for some standards and knowing where to find relevant information can be difficult, even daunting.

Some of you may be aware that the BSI held some workshops at the end of last year looking at the standards framework 鈥� you may have attended one?

The report that followed the workshop highlighted a number of recommendations to take forward. To meet several of these, a further project has been agreed, to help with delivering the aim of a national framework of information for CCTV.

A key aim is to help develop more specific guidance and create an information hub, whilst also helping to clarify, harmonise and simplify existing guidance. This is something we are working on.

Review

One of my objectives is to review the operation of the code and report back to the Home Secretary. How is it working? Is it working? What works well and what needs to change?

I鈥檓 reporting back this autumn.

But more than that I want to explore the regulatory landscape that CCTV occupies so I can provide some real recommendations to ministers that will make it better and improve it. And by improve it I mean improve it for all 鈥� installers and manufacturers, operators and managers as well as the police as end users and members of the public.

I鈥檝e already spoken about standards and as part of this review I鈥檓 determined to highlight what can be done raise standards across the board and simplify what already exists.

So, how can we raise standards?

This can be done in many ways and I was discussing this with a colleague on my Standards Board recently. We we鈥檙e talking about whether there need to be statutory minimum standards. Something in legislation that sets a bare minimum that everyone must legally meet.

After some discussion he said to me 鈥淭ony 鈥� you need to be careful about setting minimum standards in legislation as you may very well see a race to the bottom.鈥�

I think it鈥檚 clear what he meant in that if there is a minimum that is all people will strive for 鈥� they won鈥檛 go over and above it, it becomes the lowest common denominator.

Is a minimum standard mandatory certification 鈥� my team are developing a certification model with the NSI and SSAIB which I hope we will launch in the autumn. It鈥檚 not mandatory but there will be different levels of certification with a 鈥榣ite鈥� version where you self certify and it鈥檚 checked by an assessor costing around 拢75 鈥� hardly blowing the budget!?

Public Space

Another area I鈥檓 keen to look at as part of the review is who should have to 鈥榩ay due regard鈥� to the code, who must comply with it. This was one area of fervent debate when the Government consulted on the code in 2013 鈥� Government opted for an incremental self-regulated approach.

As you know only relevant authorities must pay due regard to the code and that only accounts for around five per cent of cameras.

But what about all the other places that the public have access 鈥� Universities, Football Stadiums and shopping malls but to name a few. All places that a member of the public would probably consider as public space.

When someone walks form a street monitored by Local Authority CCTV in to a shopping mall monitored by a private company do they consider themselves in a public space 鈥� I would hazard a guess that they do. So, why must one organisation comply with the code whereas it鈥檚 voluntary for the other?

Should anyone operating CCTV that monitors public space have to comply with the code? Would they have to do much more than they are already doing such as comply with the data protection act.

Also what do people believe a public authority to be 鈥� should it include residential social landlords who鈥檝e taken over housing departments of councils? Should it include large travel operators like Transport for London? Currently it doesn鈥檛 鈥� organisation like these own and operate tens of thousands of cameras.

So, I鈥檓 keen to explore who should have due regard and want to tap in to your expertise.

Sanction and inspection

One thing that has been levelled at the code and my role is that it lacks teeth. This is a fair comment I think. I don鈥檛 have any powers of sanction or inspection. So if a relevant authority is not paying due regard to the code of practice there is not much I can do.

The government is committed to light touch regulation and minimal red tape for business 鈥� this is understandable. But I don鈥檛 think that 鈥榣ight touch鈥� regulation should be confused with doing nothing if organisations don鈥檛 comply with rules or regulations.

Should I have a stick to beat people with if those who are meant to comply fail to do so? How big should it be? What should it look like? I was once told embarrassment is a very powerful tool, if not the most 鈥� would a list of non-compliant organisation published for all to see suffice rather than a financial penalty?

Europe

I鈥檓 also keeping an eye on what is happening in Europe there are three research projects all nearing conclusion funded by the European Commission to the tune of 10m Euro.

They will be making recommendations to the Commission in due course. They talk about mandatory operational requirements, mandatory privacy impact assessments and mandatory certification.

By coincidence these are some of the areas my team have been working on but not from a mandatory perspective. Of course these recommendations may not become reality but it is worth considering that they might.

Moving forward

I note that there鈥檚 a section of the User Group, perhaps it鈥檚 everyone? That likes to refer to itself as 鈥榞rumpy old men鈥� 鈥� I think there鈥檚 an expert鈥檚 forum involving them tomorrow.

Whilst some may consider me to be old I鈥檇 hate to think of myself as grumpy, it just conjures up an image of someone who complains about the status quo and that鈥檚 all they do. They do nothing to influence a change, drive it forwards or improve it.

Of course I know the reference to grumpy old men in this group is tongue in cheek and there is a drive to make the industry the best it can be 鈥� recognised as one of the best in the world.

You may have heard a famous quote 鈥� 鈥渆vil happens when good men do nothing鈥︹�.With this review it鈥檚 your chance to do something, to have your say and to make a difference.

You can play a key role here and can bring excellent insight to any extension or change to the regulatory landscape, tell us where we might need to introduce sanctions and where we could look at minimum standards across the industry.

I鈥檓 running a workshop later looking at the review of the operation of the code. I want to hear how you think it should develop and tell me what I should put in my recommendations to the Home Secretary in the autumn.

It鈥檚 an excellent opportunity for you to feed in your views. I鈥檇 like to think that I鈥檝e achieved a lot in my first year and with your help we can do even more!

I hope to speak to lots of you this afternoon.

Thank you.

Updates to this page

Published 21 May 2015