Is CCTV Permitted in Disciplinary Investigations?

Last updated: November 8th, 2022

As with all legal questions, there isn’t a straight answer.

What we can say however, is that the most common reason for the exclusion of CCTV footage from evidence in internal disciplinary matters is an employer’s failure to comply with data protection principles.

The Court of Appeal recently examined the use of CCTV in the context of employment investigations in Doolin v The Data Protection Commissioner [2022] IECA 117. While the decision went against the Data Protection Commissioner (and the employer) in this particular case, the judgment of the Court of Appeal did set out guidelines for employers on using CCTV in a way that complies with data protection law.

Background to Doolin case

Mr Doolin worked at Our Lady’s Hospice and Care Services in Harold’s Cross, Dublin. An internal investigation began when graffiti stating… “kill all whites, ISIS is my life”…..was etched into the furniture in a staff tea room. As the graffiti was discovered shortly after terror attacks in Paris, the employer took advice from the Gardaí who recommended reviewing CCTV footage to identify who had entered the room around the time the graffiti appeared.

While there was no evidence that Mr Doolin was responsible for the graffiti, the CCTV footage did reveal that Mr Doolin was taking long, unauthorised breaks from his duties. Mr Doolin received a disciplinary sanction for his unauthorised breaks and noted from the report into the disciplinary matter that CCTV footage and fob access records were examined as part of the investigation.

The report confirmed that the sole reason for accessing the CCTV footage was the investigation of Mr Doolin’s unauthorised breaks and made no reference to the identification of a suspect in connection with the graffiti.

Data protection

Section 2(1)(c) of the Data Protection Acts 1998 – 2003 sets out that data obtained for one or more specific, explicit and legitimate purposes should not be further processed in a manner incompatible with that purpose or purposes.

Mr Doolin raised a complaint to the Data Protection Commissioner (DPC) arguing his employer’s policy on CCTV stated that their use of CCTV was for security purposes only. The DPC rejected Mr Doolin’s argument. In its view, the data was processed in connection with the security incident and that the use of the footage in the disciplinary proceedings did not constitute a different purpose.

Mr Doolin then took the matter to the Circuit Court who upheld the DPC ruling. Mr Doolin appealed that decision to the High Court who held that while the data had been lawfully processed for security purposes, the use of the data for the “distinct and separate purpose” of the disciplinary proceedings was unlawful. It was on this point of law that the DPC took the matter to the Court of Appeal.

Court of Appeal

The Court of Appeal based its ruling on the data protection principle that data must be processed for an explicit and legitimate purpose that must be communicated to the individual data subject.

Throughout the legal proceedings, the DPC argued that Mr Doolin’s data was processed only once. The Court of Appeal dismissed this argument citing that the CCTV footage was first recorded, then viewed by the employer during the investigation and finally used as part of the report into the investigation.

The DPC also contended that Mr Doolin’s data was processed for security reasons and not disciplinary reasons. The Court of Appeal rejected this argument but noted that using data for a different purpose does not necessarily make it unlawful from a data protection point of view.

The Court of Appeal carried out a compatibility assessment to determine if the processing of Mr Doolin’s data was consistent with the stated aim of maintaining security. It ultimately found however that the processing of the CCTV footage as part of the disciplinary process was not compatible with the employer’s stated purpose of maintaining a CCTV system for security reasons.

Mr Doolin’s unauthorised breaks did not constitute a security threat and the CCTV footage should not therefore have been processed for the purpose of disciplining him. The Court of Appeal also considered the reasonable expectations of the data subject and taking into account the employee’s reasonable expectations, the CCTV data was used for a purpose that was neither the specified purpose nor compatible with the specified purpose. The DPC’s appeal was therefore dismissed.

How employers should manage CCTV footage

While the Court of Appeal decision went against the employer in this case, the decision did state that processing data for a different unspecified purpose is not necessarily unlawful if the data processing can be shown to be compatible with the specified purpose.

To ensure you can use workplace CCTV footage if necessary, follow these data protection principles:

  • Review your data protection policy regularly and update when appropriate;
  • Let staff know where CCTV cameras are located and the reason they are located where they are;
  • Confirm in your employee privacy notice that CCTV footage may be reviewed in employee investigations and disciplinary proceedings
  • Conduct a compatibility assessment if footage is to be processed for a purpose other than the stated purpose;
  • If alternative data is available to use as evidence during an investigation, it may be worthwhile using it to avoid disputes over the use of CCTV which is often considered invasive by employees.

Need advice on using a CCTV policy in the workplace?

If you have questions the best way to put a CCTV policy in place or want to know more about disciplinary investigations, speak to one of our experts on (01) 886 0350 or request a callback here.

Book a call with a consultant

Complete the form below and a consultant will call you as soon as possible.

Book a call with a consultant

Complete the form below and a consultant will call you as soon as possible.

Latest Resources

Seasonal workers: what employers should know

Seasonal workers
As the days get longer and the skies get sunnier (well, sometimes), summer is on people’s minds. This means that business owners, meanwhile, are starting […]

St Patrick’s Day: Have you prepared for absenteeism?

Published: March 20th 2024 Following national celebrations and public holidays like St Patrick’s day, you could find yourself down several staff members. And – as […]

What Employees Are Entitled to a Public Holiday Benefit & How Are Benefits Calculated?

public holiday
Published: March 20th 2024 From Easter Monday to St Patrick’s Day, Ireland gets ten public holidays and, with them, public holiday benefits. But what if […]

Olga Shevchenko

Director/Advocate, Immigration Advice Bureau

Olga Shevchenko specialises in immigration advocacy and consultancy, in particular, employment permit, visas, family reunification, citizenship, etc, for those seeking to visit, reside or invest in Ireland.

Olga provides extensive information, knowledge, and support to her clients, enabling access to positive solutions for people struggling to handle the immigration law.

Minister Neale Richmond

Minister of State, Department of Enterprise, Trade and Employment

Neale Richmond TD was appointed as Minister of State at the Department of Enterprise, Trade and Employment with special responsibility for Employment Affairs and Retail Business and the Department of Social Protection in January 2023.

Much of his work at the Department of Enterprise, Trade and Employment is with businesses, workers, their representative bodies and the State Agencies to ensure that the economic recovery and growth extends to all parts of the country. He works closely with the SME sector, including retail, on building resilience and on the transition to the green and digital economies.

Mark Carpenter

Director of Regulatory & Corporate Affairs, Sky

Mark Carpenter is Director of Regulatory & Corporate Affairs at Sky Ireland. In this role he has responsibility for External and Internal Communications, Public Policy and Regulatory Affairs and the company’s ‘Bigger Picture’ (CSR) programme. He also works closely with Sky Group teams on a variety of matters, in particular our partnerships with domestic broadcasters.

Prior to working at Sky, Mark worked as a Policy Officer in Houses of the Oireachtas and as a Management Consultant at Accenture. He has a BA in History from Oxford University and a PhD in Political Science from Trinity College Dublin.

Nora Cashe

Litigation and Compliance Manager, Peninsula

Nóra studied Law in Griffith College Dublin and qualified as a Barrister in 2008, practising in the area of Criminal law. She is also member of the Irish Employment Law Association.

Nora has extensive experience representing clients at Employment Tribunal hearings, Conciliation / Mediation meetings before both the Workplace Relations Commission and the Labour Court. 

Nóra is a member of the Irish Employment Law Association and engages with the WRC Adjudication Service as part of their stakeholder engagement forum.

Deiric McCann

Managing Director, Genos International Europe

Deiric McCann leads Genos International Europe – The EU division of a world-leading provider of emotional intelligence solutions. 

With over two decades experience at the highest levels of management, Deiric supports clients to develop the resilience, emotional intelligence, psychological safety and engagements of their employees.

Rhiannon Coyne

Senior HR Consultant, Graphite HRM

Rhiannon Coyne is a Senior HR Consultant at Graphite HRM and will be providing an overview of best practice on how to deal with complaints of bullying and harassment in the workplace. 

With a number of recent updates to employment laws, Rhiannon will take a closer look at employment equality and how it is interlinked to Health & Safety and what employers can learn from recent case laws.

David Begg

Chairman, Workplace Relations Commission

David Begg was appointed Chairperson of the Workplace Relations Commission (WRC) in January 2021.

David is also a professor at Maynooth University Institute of Social Sciences. Mr Begg’s extensive history in the trade union movement included leading the ESB Officers Association and Irish Congress of Trade Unions, stepping away from the latter in 2001 to chair international aid agency Concern.

David Begg was also previously a director of the Central Bank of Ireland between 1995 and 2010.