Taxi and private hire vehicles: CCTV specifications and conditions
Guidance on the use of CCTV systems.
This file may not be fully accessible.
In this page
General
These guidelines set out to ensure that CCTV systems installed in Taxis and Private Hire Vehicles (PHVs) licensed by [insert council name] are properly managed whilst being used to prevent and detect crime; and enhance the health, safety and security of both licensed drivers and passengers.
For the purpose of this Policy the term ‘CCTV system’ will apply to any electronic recording device attached to the inside of vehicle having the technical capability of capturing and retaining visual images and audio recording from inside or external to the vehicle. In addition to the standard CCTV camera system these may include for example, such devices as events/incident/accident data recording devices.
The installation and operation of CCTV must comply with the requirements of the Information Commissioner’s Office (ICO): In the picture: A data protection code of practice for surveillance cameras and personal information
A signed statement of compliance from the company providing the CCTV system, must be provided confirming that the system meets the required specification detailed in this policy.
This policy will apply to any vehicle that contains a CCTV system as described above.
Purpose of CCTV
The council believes that will improve driver/passenger safety in licensed vehicles by:
- deterring the occurrence of crime
- reducing the fear of crime
- assisting the police with criminal investigations
- assisting insurance companies in investigating motor vehicle accidents
CCTV requirement
The use of CCTV systems in licensed vehicles is voluntary.
Any CCTV system must, as a minimum, meet the requirements set out in the specification in Annex A of this guide. Only CCTV systems meeting these requirements can be installed into hackney carriage and private hire vehicles.
Download of data
Data will only be downloaded for the following purposes:
a) In response to a legitimate data access request under the Data Protection Act 2018, in relation to the vehicle/driver
b) In response to a Subject Access Request compliant with the Data Protection Act 2018
c) Where a written complaint has been made to the Licensing Section regarding the vehicle/driver and the complaint cannot be resolved in any other method.
Further information on the downloading of data from CCTV systems is contained within the licensing authority’s download policy [Insert link].
Data retention
Data retrieved by the licensing authority will only be retained for the following periods:
a) Cases leading to prosecution 10 years from date of trial
b) Formal caution 3 years from date of caution
c) Written warning or no formal action 3 years from date of decision
d) Subject Access request 6 years from date of request.
Data controller
The information Commissioner’s Office (ICO) defines a “data controller” as the body which has legal responsibility under the Data Protection Act 2018 for all matters concerning the use of personal data. For the purpose of the installation and operation of a CCTV system in Hackney Carriage and Private Hire Vehicles, the “data controller” will be [insert council name].
Third party data processor
Where a service provider is used for the remote storage of CCTV data they will act as a “data processor”. A data processor, in relation to personal data, means any person (other than an employee of the data controller) who processes data on behalf of the data controller, in response to specific instructions. The data controller however retains full responsibility for the action of the data processor.
All CCTV systems in [insert council name] licensed Hackney Carriage and Private Hire Vehicles must be installed by a council approved service provider that acts as a data processor. For details of approved providers, please contact [insert contact details].
Privacy Impact Assessment (PIA)
The licensing authority has produced a PIA to consider the need for CCTV, to ensure that the issue of privacy has been considered, and to put appropriate controls in place to both minimise any intrusion and to protect the data.
Signage
All Hackney Carriages and Private Hire Vehicles with CCTV must display signage within the vehicle to indicate that CCTV is in operation. At least 3 signs must be displayed (1 on the passenger side in the front, and 1 each side of the vehicle in the rear).
The signage must be displayed in such positions so as to minimise obstruction of vision and to make it as visible as possible to passengers, before and after entering the vehicle.
In the limited circumstances where audio recording is justified, signs must make it very clear that audio recording is being or may be carried out and this must also be verbally brought to the attention of the passengers.
Audio recordings
Approved CCTV systems are permitted to record audio, but cannot be capable of continuous sound recording.
Sound can only be recorded via a ‘panic’ button operated by the driver or passenger. The driver can only operate the sound recording in the following circumstances:
- When he/she believes there is a risk to their or their passenger’s safety
- When he/she is concerned about potentially harassing or abusive language
- For the purpose of protecting their livelihood e.g. disputes about payment, concern of potential damage to the vehicle.
In these limited circumstance, where the audio recording is justifiable, signs must make it clear that audio recording is being carried out.
Maintenance and use
The maintenance and use of the system must be in accordance with the hackney carriage/private hire vehicle licence conditions set out in Annex B.
Annex A: CCTV minimum specification
|
1.0 Operational technical specifications |
||
|
Ref |
Specification |
Details |
|
1.1 |
100% solid state design or a proven vibration and shock resistant system
|
The system should not have any fan and the recording should be vibration and shock proof, i.e.: - Flash-based SSD (100% industrial grade), Hard disk with both mechanical anti-vibration and anti-shock mechanism and self-recovery and self-check file writing system. |
|
1.2 |
8 to 15 Volts DC |
Operational between 8 and 15 volts DC |
|
1.3 |
Reverse polarity protected |
System to be protected against reverse voltage. |
|
1.4 |
Short circuit prevention |
System to be protected against short circuits |
|
1.5 |
Over voltage protection |
System to be protected against high voltage transients likely to be encountered in the vehicle electrical system. |
|
1.6 |
Automotive electromagnetic compatibility requirements
|
The in-vehicle taxi camera system must be compliant with Council Directives:
(CISPR 22/EN55022),
6.8 and 6.9) The taxi camera equipment should therefore be e-marked or CE-marked with confirmation by the equipment manufacturer as being non-immunity related and suitable for use in motor vehicles. |
|
1.7 |
System activation (on / off) |
The system is required to be active at all times that the vehicle is being used as a licensed vehicle. The switch that deactivates the system must be located within the vehicles boot or engine compartment (i.e. it must only be possible to deactivate the system from outside of the vehicle)
|
|
1.8 |
First-in/first-out buffer recording principle |
|
|
1.9 |
Built-in, automatic logging of all access actions, including date and personnel names |
|
|
1.10 |
Security, duration and auto-clearing of log files |
|
|
1.11 |
Image export formats and media |
Images must be exported in commercially available formats. |
|
1.12 |
Image protection during power disruption |
Images must be preserved in the event of loss of power. Battery back-up will not be permitted |
|
1.13 |
Unit must operate without the ignition being turned on |
The Unit must have the ability to operate for at least 2 hours without power from the ignition. |
|
1.14 |
Image and audio data shall be recorded and stored in a unit separate from the camera head |
|
|
1.15 |
GPS capability |
System must be compatible to allow for GPS capability. |
|
1.16 |
The system must be capable of recording audio time synchronized to the recorded images. |
|
|
1.17 |
The system shall not record audio except when audio recording is activated by means of an approved trigger.
|
The system should have the ability to start recording audio data by means of at least two trigger buttons (see also 1.26 below). One trigger button must be capable of being activated by the driver. Once the trigger is activated the system must begin to record audio data. The system will continue to record audio until the same trigger is activated again. The second activation of the trigger must result in the cessation of audio recording (e.g. a button could be pressed to begin audio recording, i.e. the trigger, which could for example be a button, would be pressed to begin audio recording, pressing the button again would stop audio recording). The second trigger button must be capable of being activated by the passengers in the vehicle independently of the driver. Once the trigger is activated the system must begin to record audio data. The system will continue to record audio until the same trigger is activated again. The second activation of the trigger must result in the cessation of audio recording (i.e. the trigger, which could for example be a button, would be pressed to begin audio recording, pressing the button again would stop audio recording). Both audio activation triggers must be independent of each other – this means that audio recording can only be deactivated by means of the same trigger (driver or passenger) that was used to activate the audio recording. |
|
1.18 |
The audio playback, when triggered, shall be in ‘real time’ and synchronised with the images that are captured. |
|
|
1.19 |
Digital sampling of the audio signal must exceed 8KHz |
|
|
1.20 |
Digital resolution of the audio samples must exceed 10 bits. |
|
|
1.21 |
The audio microphone shall be integrated within the camera head. |
|
|
1.22 |
Audio data and image data must be stored together, not in separate files, and must be protected against unauthorised access or tampering. |
|
|
1.23 |
The system must support testing of the audio function for installation set-up and inspection purposes. |
|
|
1.24 |
The system must ‘go to sleep’ to reduce battery drain during prolonged idle time. It must be capable of immediate reactivation |
|
|
1.25 |
Images recorded by the system shall not be displayed within the vehicle |
|
|
1.26 |
The system must have at least two emergency activation triggers (audio activate buttons).
|
One of the triggers / audio activate buttons must be capable of being operated by the driver – this must be independent of the audio recording activation switch. At least one other trigger / audio activate button must be capable of being operated by a passenger from any passenger seat in the vehicle. Once activated, this switch must trigger the recording of video and audio in accordance with section 6.1 below. The passenger must have sight of a notice that advises how to stop the audio recording |
|
1.27 |
The system must include a visual indicator that will clearly show when audio recording is taking place. This indicator must be visible to all passengers within the vehicle. |
This may take the form of an indicator LED built into the audio activation switch, or a remote LED that can clearly be seen by passengers.
|
|
2.0 Storage capacity technical specification |
||
|
Ref |
Specification |
Details |
|
2.1 |
Minimum of seven days i.e. (7 x 24 hours) of recording capacity |
The camera system must be capable of recording and storing a minimum of fourteen days of images of HD1 (720/288) size or better. Recordings must be overwritten after 28 days from date of capture, except in exceptional circumstances following a request from …….. Police or ……… Council. However, in such cases the data must be deleted following conclusion of the matter. |
|
2.2 |
Images must be clear in all lighting conditions |
System to provide clear images in bright sunshine, shade, dark and total darkness. Also, when strong back light is present. |
|
3.0 Camera Head Technical Specification |
||
|
Ref |
Specification |
Details |
|
3.1 |
Camera installation non-obstructive |
The camera and all system components shall be installed in a manner that does not interfere with the driver’s vision or view of mirrors or otherwise normal operation of the vehicle. |
|
3.2
|
Protected camera disconnect |
The camera head shall be designed to disconnect for ease of removal and replacement by maintenance personnel. |
|
3.3
|
Special tools for adjustment/removal |
To prevent inappropriate interference only tools supplied to authorised fitters should be capable of carrying out adjustments or removal. |
|
3.4
|
Field of view to capture all passengers in the vehicle |
The lens of the camera must be of a type that captures the driver and all passengers of the vehicle on the recorded image. The lens must be of a style not to create a “fishbowl” effect. |
|
3.5
|
Images must be clear |
System to provide clear images in all lighting conditions and allow different skin tones to be detected |
|
3.6
|
Compatible for use in vehicles with a partition (shield) |
The camera system must be adaptable to provide clear images when a vehicle is equipped with a shield. This may be accomplished with the use of multiple camera heads. |
|
3.7
|
Multiple cameras |
The unit shall be capable of supporting up to four (4) cameras. Four cameras may be required to provide adequate coverage in larger vehicles and/or certain purpose built vehicles. |
|
4.0 Technical specification: storage device
|
||
|
Ref |
Specification |
Details |
|
4.1 |
Impact and shock resistance |
The recorder shall be impact resistant, sufficient to withstand a typical car accident, or striking with a large, heavy object such as a suitcase. |
|
4.2 |
Controller in concealed location |
The storage unit shall be concealed from view and effectively inaccessible except by authorised personnel. |
|
4.3 |
Download port provision |
The recorder shall be equipped with a communication port for downloading by authorised personnel. |
|
4.4 |
Download port shall be located in an easily accessible location such as a glove compartment. |
The recorder download port shall be located in the glove box if practicable, if not then in a location that does not require the removal of panels and is accessible. |
|
4.5 |
Download port cable length (1 foot minimum) |
Download port shall be at least one foot in length for ease of download. |
|
4.6 |
Recorder to be securely affixed to the vehicle |
|
|
4.7 |
Log to register each user access |
|
|
4.7.1 |
Log to register camera system parameter modifications |
|
|
4.7.2 |
Log to register each image download session |
|
|
4.7.3 |
Log to register modification/manipulation of downloaded images |
|
|
4.7.4 |
Log to register exporting of downloaded images |
|
|
4.7.5 |
Log to register exporting of downloaded clips |
|
|
4.7.6 |
Log file protected against unauthorised access |
|
|
4.7.7 |
Time/date stamp |
All stored images must be time and date stamped. |
|
4.7.8 |
Vehicle ID number stamp |
All stored images must have two fields for vehicle identification (VIN & number plate). |
|
4.7.9 |
Controller non-modifiable ID code stamp |
Each recorded image shall be automatically stamped with a unique and non-modifiable code that identifies the controller that was used to record the image |
|
4.7.10 |
Controller (Storage Recorder) |
Manufacturer to supply ……… Council with a supply of specialised tools to allow for removal of the controller and download of data when required. |
|
5.0 Specifications for video and audio recording |
||
|
Ref |
Specification |
Details |
|
5.1 |
Video image recording on system activation (when audio is not activated). |
The system shall record images at a minimum rate of four images per second.
|
|
5.2 |
Video image recording when audio is activated.
|
The system shall record images at the rate of twenty five images per second during periods when audio recording is activated (either due to time requirement, or through activation by the driver trigger switch or passenger audio button). |
|
5.3 |
When activated, audio recording must be in real time and synchronised with the video recording. |
When activated, audio recording must be in real time and synchronised with the video recording. |
|
5.4 |
System to continue to record images (and audio when applicable) when engine is off. |
System must continue to record images (and audio when applicable) for 30 minutes after engine / ignition is switched off. |
|
6.0 Specification for activation via driver or passenger trigger/audio button |
||
|
Ref |
Specification |
Details |
|
6.1 |
The activation of a trigger button must provide for overwrite-protected image storage when activated by driver or passenger. |
The system must be fitted with at least two trigger buttons that once activated will trigger the protected recording of audio and video (see also 1.17 and 1.26 above). |
|
6.2 |
Emergency image overwrite protection capability
|
Image sequences resulting from emergency activation shall be recorded in an area of memory which is protected from being overwritten |
|
6.3 |
Overwrite protection capacity for at least 3 activations |
|
|
6.4 |
Overwrite protection self-clear on 96 hr timer |
|
|
7.0 Downloading technical specification |
||
|
Ref |
Specification |
Details |
|
7.1 |
Time to download complete memory not to exceed 30 minutes |
Time to download to be accomplished in 30 minutes or less. |
|
7.2 |
Provision of necessary software, cables, security keys to …………. Council Licensing Team. |
|
|
7.3 |
System must be compatible with a IT operating system agreed with the local authority |
|
|
7.4 |
Downloaded images stored in non-volatile media |
|
|
7.5 |
Downloaded images stored in secure format
|
|
|
7.6 |
Verifiable image authenticity |
Each image shall be stamped with controller ID and vehicle ID and be tamperproof. |
|
7.7 |
Provision of technical support to …………..Council Licensing Team when necessary. |
To assist in accessing system in case of damage to the vehicle or to the system in case of accident within 1 hour during normal working hours and within 8 hours otherwise. |
|
7.8 |
Wireless Download Prohibited
|
Unit must not allow for wireless downloads. Wireless diagnostic may be used. All wireless hardware to be disabled. |
|
7.9 |
Filter the specific images for events and times for the approximate time of the crime committed. |
|
|
8.0 Requirements in relation to System Information
|
||
|
Ref |
Specification |
Details |
|
8.1 |
Provision of service log sheet with each unit shipped |
The unit manufacturer shall have a service log shipped with the unit. The manufacturer shall also enclose detailed instructions for the drivers with each unit shipped. An installation manual shall also be furnished to authorised installers and fleet operators. |
|
8.2 |
Serial number indication on service log |
The unit will be marked with a serial number |
|
8.3 |
Installation date indication on service log |
The provision for the installer to indicate the installation date |
|
8.4 |
Provision of driver instruction card with each unit shipped |
|
|
8.5 |
Provision of installation manual to installers and fleet operators |
|
|
8.6 |
Clarity of operating instructions |
The system shall be provided with clear and concise operation instructions which are written with due consideration to varying levels of literacy. |
|
8.7 |
Installation by authorised agents |
The unit shall be installed by manufacturer’s authorised agents. |
|
8.8 |
Provision of authorised agents list to ………..Council Licensing Team |
The manufacturer shall provide a list of all authorised agents to ………… Council Licensing Team.
|
|
8.9 |
Documentation |
The manufacturer must provide clear and concise operating instructions which are written in layman’s terms. (Details on how the system records the images) |
|
8.10 |
Image Protection |
All captured images must be protected using encryption software that meets or exceeds the current FIPS 140-2 (level 2) standard or equivalent. |
|
9.0 Vehicle inspection facility |
||
|
Ref |
Specification |
Details |
|
9.1 |
Provision of system status/health indicator |
The driver shall have an indicator showing when the system is operational and when there is a malfunction. |
|
9.2 |
Mounting location of system status/health indicator to be seen by driver only |
The indicators shall be mounted/installed for the driver’s vision only. |
|
9.3 |
Additional indicator requirement |
Where a system is fitted with an indicator to show that the system is on, this indicator shall be separate to those listed above or of a different colour to avoid any possible confusion on the part of the drivers using the system. |
|
9.4 |
Designed/Installed to be testable by ……….. Council Licensing Team (or persons acting on behalf of the Council –such as vehicle inspectors) |
The system shall be designed and installed such that the system may be easily tested by ……….. Council Licensing Team staff to ensure that all features are operating and that images are being recorded as prescribed. |
|
10.0 General system requirements
|
||
|
Ref |
Specification |
Details |
|
10.1 |
Vandal and tamper resistance |
|
|
10.2 |
Provision of statement of compliance |
In addition to a formal test of all aspects of this requirement specification, a statement of compliance shall be provided and signed by an officer of the company. |
|
10.3 |
Reliability in operational and environmental conditions |
The system shall provide reliable and full functionality in all operational and environmental conditions encountered in the operation of taxis. |
|
10.4 |
Programmability of image timing parameters |
It shall be possible to change timing and parameters without the requirement to change components. |
|
10.5 |
Training and Technical Support and Equipment |
Manufacturer must provide ………… Council Licensing Team a Training and Technical Manual. |
|
10.6 |
Software and Hardware |
Manufacturer to supply ………….. Council with a supply of cables and software to be installed under the supervision of the Council’s authorised staff. |
|
10.7 |
Agreement between the Camera Manufacturer and ……………..Council
|
Agreement to allow the ………….Council the relevant software from the manufacturer so that in the event the Manufacturer goes out of business, the Council will be able to support the system. |
|
10.8 |
All equipment must comply with any legislative requirements on respect of the Motor Vehicle Construction and Use Regulations |
|
Annex B: additional conditions
Hackney Carriage/Private Hire Driver and Vehicle Additional Licence Conditions where CCTV is installed in a vehicle
The vehicle proprietor shall ensure that:
1. No CCTV system shall be installed in a licensed vehicle, unless it is of a type that has been approved by the licensing authority, and written consent has been provided by the licensing authority confirming the type of system, location and number of cameras. The type of system, location and number of cameras shall not be varied without prior consent of the licensing authority.
2. The CCTV system is properly and regularly maintained and serviced in accordance with the manufacturer’s instructions by a suitably qualified person, approved by the licensing authority. Written records of all maintenance and servicing shall be made and retained by the proprietor for a minimum of 12 months. Such written records shall be made available on demand by an authorised officer of the licensing authority or a Police officer.
3. The CCTV system must be fully operational at all times the vehicle is in use for hire or reward. If the system is not operational the vehicle must not be used for hire or reward until it fixed and fully operational in accordance with the licensing authority’s CCTV specification.
4. The recording system and memory card (or other image memory recording system) must be securely stored within the vehicle and away from public access.
5. The system or the footage that is contained within it (nor must the proprietor allow the system to be tampered or interfered with my any person that does not have the licensing authority’s express authority to do so), except as would be expected in order to operate the system in accordance with the manufacturer’s directions.
6. The images contained in the recording device can only be downloaded by an Authorised Officer of the licensing authority or Police Officer.
Hackney Carriage/Private Hire Driver Licence Conditions:
1. The driver must ensure that the vehicle’s CCTV system is operational at all times the vehicle is used for hire or reward. If the system is not operational the vehicle must not be used for hire or reward until it fixed and fully operational in accordance with the licensing authority’s CCTV specification.
2. Audio recorded must be activated by the driver in the following circumstances:
a) Whenever an unaccompanied child (under 18 years old) or vulnerable adult is being carried in the vehicle
b) Any time the driver and passenger is in a dispute and the driver feels threatened by the behaviour of a passenger.
3. The driver must not tamper or otherwise interfere with the system or the footage that is contained within it (nor must the driver allow the system to be tampered or interfered with my any person that does not have the licensing authority’s express authority to do so), except as would be expected in order to operate the system in accordance with the manufacturer’s directions.