What should you do?

• Document the resolution of different points in the camera scene
• Document the intended retention time
• Consider applying privacy masking – permanent or liftable
• Consider setting up permissions for viewing live videos, recordings
• Consider restricting access for exporting recordings and for lifting privacy masks
• Regularly review roles and responsibilities for operators, investigators, system administrators and others with access to the system
• Consider restricting access to groups tasked with investigations for cameras that are specifically positioned to capture identity (for example, faces of people entering a store)
• Consider restricting access to recorded video for operators, either completely, to only the video recorded in the past few hours, or only with dual authorization
• Limit the number of users who have an Administrator Role