Before purchasing any networked camera for installation in a University owned, leased, or operated facility to view public or private areas, regardless of cost, approval must be granted by the Director of Safety & Security Systems and Technology. An appeal to the decision made by the Director of Safety & Security Systems and Technology will be made to the Networked Camera Oversight Group with final authority being the Associate Vice President (AVP) for Safety and Security/Chief of Police. The requirements for installing and managing all networked cameras that view University assets and public spaces in University facilities and on University property are outlined below. Also included are requirements for the management, viewing, retention, dissemination, and destruction of any associated media and records by the regulations of the Virginia Public Records Act 42.1-76 et seq. of the Code of Virginia.

This policy does not imply or guarantee that cameras will be monitored in real-time 24 hours a day, 7 days a week.

Exceptions: This policy does not apply to:

1. Use of cameras solely for:

   • Remote monitoring of facility construction and progress.
   • Videotaping of athletic events or practices for reviews.
   • Carrying out human subject and animal research (which use is governed by University policies for research) or other legitimate educational purposes.
   • Monitoring a patient for clinical or behavioral reasons.

2. Use of cameras (whether stationary, body-worn, portable, or mobile) for:

   • Covert operations conducted by law enforcement during criminal surveillance.
   • Investigative or other law enforcement functions.
   • Parking enforcement or revenue collection.

1. Authority:
   Oversight of the design, installation, maintenance, and utilization of networked cameras and associated policies, standards, and procedures lies with the Department of Safety and Security (DSS) and the Networked Camera Oversight Group. This includes:

   • Design, maintenance, and review of a University strategy for the procurement, deployment, and use of networked cameras, including this and related policies.
   • Design and approval of University standards for networked cameras and their use.
   • Creation of the standard University networked camera system or service.
   • Authorization of the placement of all networked cameras.
   • Approval of the purchase of any new networked camera systems.
   • Review of existing networked camera systems and installations and identification of modifications required to bring them into compliance with this policy.
   • Creation and approval of procedures for the use of networked cameras.

2. Networked Camera Placement:

   • The Department of Safety and Security maintains oversight of temporary or permanent networked cameras on Grounds. As such, all installations must be approved by DSS.
   • All networked camera equipment must comply with University standards and be connected to the University’s network.
   • Departments and schools desiring the installation and use of networked cameras must complete a request for such installation in consultation with the Department of Safety and Security via the on-line Networked Camera Installation Request Form.
   • All requests for networked cameras must include the location for the camera placement for the University facility or public space(s) and identify a funding source for the purchase and maintenance of the cameras.
   • A Department of Safety and Security team member will follow up with the requester within 10 business days of receipt to schedule either a site-visit or otherwise collect the information needed for the Director of Safety & Security Systems and Technology to review the request.
   • The Director of Safety & Security Systems and Technology will review the request and either approve or deny the request.
   • Upon approval by the Director of Safety & Security Systems and Technology, the Department of Safety and Security coordinates with the department/school and oversees all activities associated with completing the request.
   • The use of networked cameras is limited to public areas. Video surveillance conducted in private areas owned or controlled by the University must be authorized by the AVP for Safety & Security/Chief of Police.
   • Networked cameras must not be directed at the windows of any privately-owned home not located on University property. Pan Tilt Zoom (PTZ) cameras that can view windows of privately-owned homes must be able to “mask” these windows by utilizing prohibitive software designed to prevent viewing. (Home in this context refers to any dwelling (rented, leased, or university property) where a person or persons reside either permanently or temporarily.)
   • Networked cameras authorized in private areas will be used narrowly to protect persons, money, real or personal property, documents, supplies, equipment, or pharmaceuticals from theft, destruction, diversion, or tampering.
   • Inoperative, placebo, or “dummy” networked cameras must not be installed or utilized, as they may lead to a false sense of security that someone is monitoring an operational camera.
   • If the Director of Safety & Security Systems and Technology denies the request, the requesting department/school, program, contractor, or University organization may seek approval of their department/school vice-president/dean or chief executive officer, who may appeal the decision to the AVP for Safety & Security/Chief of Police.
   • Removing cameras without authorization from the Director of Safety & Security Systems and Technology, the AVP for Safety & Security/Chief of Police, and the Networked Camera Oversight Group is prohibited.

3. Camera Monitoring and Access to Recordings:

   • Monitoring: University cameras are not monitored continuously under normal operating conditions but may be monitored by University Police or other authorized personnel for legitimate safety, security, or operational purposes that include but are not limited to: monitoring restricted access areas/locations, monitoring traffic for special events, managing visitors, conducting investigations of alleged policy or criminal violations, and enhancing the response of public safety agencies such as police, fire, and emergency medical services.
   • Access: The University Police will review all requests regarding the release or review of recorded video. Release or review of recorded video images will not occur without authorization by UPD and by the law, and when appropriate, consultation with University Counsel.

4. Appropriate Use and Confidentiality:

   • Video monitoring for security purposes is conducted professionally, ethically, and legally. Monitoring individuals based on characteristics of race, gender, sexual orientation, disability, or other protected characteristic is prohibited.
   • All faculty and staff are prohibited from using or disseminating information acquired from University cameras except for official purposes. All information and observations made while operating cameras are considered internal use data. This data can only be used for authorized University and law enforcement purposes or as the law requires. University Counsel will have access to the recordings as needed and requested.
   • Sharing of user credentials and passwords for camera access is strictly prohibited.
   • The Vice President & Chief Human Resources Officer (or designee) must approve using camera recordings as evidence in situations involving personnel policy infractions.
   • The use of camera recordings for any purpose not detailed within this policy is subject to review by the Department of Safety and Security.

5. Training:

   • UPD Camera Control Operators must receive regular training in appropriate camera use’s technological, legal, and ethical parameters.
   • All other individuals granted camera access must be given a copy of this policy and provided with the appropriate level of training necessary.

6. Storage, Retention, Disposal of Recordings, and Maintenance:

   • Storage, retention, and disposal of recordings adhere to the regulations of the Virginia Public Records Act 42.1-76 et seq. of the Code of Virginia.
   • Recorded video is stored no less than 14 days. When retained as part of a criminal investigation or court proceeding, or other bonafide use as approved by the AVP for Security & Safety/Chief of Police (or designee) and the University Records Officer, retention may be longer.

7. Responsibilities:
   The Department of Safety and Security is responsible for:

   • Convening the Networked Camera Oversight Group as necessary.
   • On-going enterprise networked camera maintenance, assessment, and placement.
   • Collaborating with departments/schools to implement networked camera recommendations.
   • Coordinating the system design, purchase, operation, management, and monitoring of networked cameras pursuant to this policy.
   • Assessing new camera locations in coordination with Information Technology Services, UVA Medical Center, the Office of the Architect, Office of Facilities Management, and other stakeholders.
   • Developing and overseeing a preventative maintenance schedule to assure cameras remain in working order.
   • Developing and overseeing a system to recognize inoperable cameras.

   Information Technology Services is responsible for:

   • Maintaining a separate virtual network for the video management system.
   • Enabling networking for camera locations as needed.
   • Maintaining and updating software and firmware of virtual servers and storage arrays that are the foundational components of the video management system.

   The Office of the Architect is responsible for:

   • Assessing new camera locations in coordination with the Networked Camera Oversight Group.
   • Assisting in the installation and maintenance of cameras as needed for the preservation of architectural standards.

   Departments Using the Video Management System are responsible for:

   • Designating a camera oversight representative to liaison with Safety and Security.
   • Identifying those individuals within their department that should have access to view cameras.
   • Maintaining installed cameras in coordination with the Department of Safety and Security.
   • Complying with this policy.

   University faculty, staff, and Medical Center Employees are responsible for:

   • Reporting any person who tampers with or destroys video cameras or equipment to the University Police Department.

   The Office of Facilities Management is responsible for:

   • Assisting in the installation of cameras as needed.
   • Facilitating compliance with this policy in coordination with subcontractors.

8. Compliance with Policy:
   Failure to comply with the requirements of this policy may result in disciplinary action up to and including termination and expulsion in accordance with relevant University policies.

   Anyone who tampers with or destroys video cameras or equipment (including hacking, intercepting, interrupting, or interfering with service) is subject to criminal prosecution and University action, as applicable.

   Questions about this policy should be directed to the Department of Safety and Security.