The following privacy notice is for Urban Big Data Centre’s collection of video data from 4 UK cities to facilitate the development of accurate object detection models.
CCTV video collection.
Your personal data
The University of Glasgow will be what’s known as the ‘Data Controller’ in relation to the collection of video footage for developing object detection analysis. This privacy notice will explain how The University of Glasgow will process your personal data.
Explanation of the purpose
We are currently videoing in this area, on behalf of the Urban Big Data Centre at the University of Glasgow, as part of a project funded by the Economic and Social Research Council (Government funding body) to develop methods for measuring levels of activity on the street. We are collecting Video footage of pedestrians, vehicles and cyclists to enable us to sample images which we can then label and use to train computer models to measure street activity. These models will be used to measure changes in activity as a way of evaluating the success of changing street infrastructure like new cycling lanes or wider pavements.
Legal and Ethical basis
Our lawful basis for processing these data is a public task. This is outlined in Article 6(1)(e) of the GDPR giving a lawful basis for processing where "processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller".
The specific legal basis in law is section 7 of the Universities (Scotland) Act 1898 (as amended by section 8 of the Universities (Scotland) Act 1966) which provides the University with the power:
"(1)To regulate and superintend the teaching and discipline of the University [and to promote research]"
Also the company has gained the appropriate local government permits to install CCTV cameras and collect data from this location. The project has had ethical approval from the University of Glasgow’s College of Social Science Ethics committee. If you want more information about this approval you can email questions to: Muir.Houston@glasgow.ac.uk
Types of personal information
CCTV captures video footage of pedestrians, vehicles and cyclists in public spaces.
Source of personal information
This personal data is collected through the CCTV camera video footage which will contain images of people who could be identified by anyone viewing the images.
What we do with it and who we share it with
- UBDC / University of Glasgow use these data to undertake research, and to support the work of eligible users of its national data service.
- All personal data is processed by named UBDC / University of Glasgow researchers and data scientists, or eligible, sub-licenced data service users in the United Kingdom. Access to data requires individuals to have completed appropriate information governance training and is limited to UBDC / University of Glasgow’s secure IT system, or a secure research platform agreed by UBDC / University of Glasgow.
- Stored personal data is managed on secure network drives and databases in encrypted form. Authentication and authorisation systems administered by UBDC / University of Glasgow staff restrict access to named individuals
- Derived privacy-safe datasets (which contain no personal data) may be provided under licence to eligible academic researchers, government staff and consultants.
- Where eligible trained and demonstrably responsible researchers wish to access privacy-sensitive datasets or extracts, we will assess their applications to do so on a formal basis, involving appropriate members of our own academic community as well as, where applicable, relevant ethical experts and third-party reviewers. Furthermore, such access will be rigorously controlled in order to ensure any outputs pose no privacy risks and individuals are completely protected throughout the process. In such cases access will be limited to a secure research environment, such as the eDRIS National Safe Haven platform, part of Public Health Scotland. These environments have strict rules requiring appropriate training, limiting the types of processing that can be undertaking and implementing statistical disclosure controls to ensure that only non-disclosive outputs are permitted.
- Privacy sensitive data will not be transferred outwith the United Kingdom.
In certain circumstances, we may be required to disclose CCTV images to certain bodies of authority, such as the police and emergency services.
The video footage will be retained for 10 years before being deleted.