Video surveillance of office premises, server rooms, and building access points for security purposes.

Data Details
Data Subjects
EmployeesVisitorsContractors
Data Volume
Continuous recording
Data Categories
Video FootageAccess TimestampsLocation Data
Processing Type
Collection
Automated Decision-Making
No
Legal Basis
Legal Basis
Legitimate Interest
Consent Mechanism
Signage at entry points notifying of CCTV recording
Purpose
Protecting company assets, ensuring physical security, and preventing unauthorized access.
Legal Basis Detail
Legitimate interest in protecting company property, employees, and preventing theft or unauthorized access.
Recipients & Transfers
Internal Recipients
Security TeamHR (for incidents)Senior Management
External Recipients
Security Monitoring Company (SA)
Retention & Security
Retention Period
30 days rolling retention unless incident requires longer preservation
Retention Justification
Security Measures
✓ Locked Server Room✓ Restricted Playback Access✓ Encrypted Storage✓ Physical Security
PDPL Compliance Assessment
Update →
D1 Data Subject Rights & Consent
60%
Partial

Most requirements for Data Subject Rights & Consent are addressed. Some gaps identified in documentation or process.

D2 Processing Principles & Lawful Basis
70%
Partial

Most requirements for Processing Principles & Lawful Basis are addressed. Some gaps identified in documentation or proce…

D3 Data Protection & Security
82%
Compliant

All requirements for Data Protection & Security are met. Documentation is complete and up to date.

D4 Organizational Requirements & Governance
55%
Non-Compliant

Significant gaps identified in Organizational Requirements & Governance. Immediate remediation required.

D5 Cross-Border Data Transfer
95%
Compliant

All requirements for Cross-Border Data Transfer are met. Documentation is complete and up to date.

D6 Compliance & Accountability
58%
Non-Compliant

Significant gaps identified in Compliance & Accountability. Immediate remediation required.

Associated Risks
1
Critical CCTV DPIA not completed - regulatory exposure… Open
Edit Activity Add Risk