CCTV images of people are personal data and are covered by the Data Protection Act (DPA), and so is information about people which is derived from images – for example, vehicle registration numbers.
Most uses of CCTV by organisations or businesses will be covered by the Act, regardless of the number of cameras or how sophisticated the equipment is.
Individuals are entitled to request copies of CCTV images, these requests are processed under the Data Protection Act 2018 as Subject Access Requests or under the Freedom of Information Act 2000 as Freedom of Information requests.
Both types of request are handled centrally by the University Information Compliance Office in the Council Secretariat. There is no requirement for individuals to refer to either piece of legislation when making their request.