Which is a key component of a surveillance program's monitoring policy?

• A. Defined access rights to footage, retention periods, and lawful basis.
• B. Unlimited access for all employees.
• C. No policy exists.
• D. Retention of footage for 100 years.

Answer: (A)

Defining who can access footage, how long it is kept, and the legal justification for processing is essential to a surveillance program’s monitoring policy. Having clear access rights ensures only authorized personnel view or handle footage, reducing privacy risks and potential misuse. Specifying retention periods prevents data from being kept longer than needed, supporting data minimization and compliance with regulations. Stating the lawful basis for processing provides a legitimate foundation for collecting and using the footage, helping to meet legal requirements and maintain accountability.

The other options fall short. Unlimited access creates a control gap and increases exposure to misuse. Having no policy at all leaves governance undefined and opens the door to inconsistent practices. Retaining footage for an excessively long period, like 100 years, is usually unnecessary and may violate data minimization and privacy principles.