SEC-034: Use of University Networked Cameras that View University Assets and Public Spaces

Prior to the purchase of any networked camera that will be installed in a University owned, leased, or operated facility to view public or private areas, regardless of cost, approval must be granted by the Networked Camera Oversight Group. The requirements for the installation and management of all networked cameras that view University assets and public spaces in University facilities and on University property are outlined below. Also included are requirements for the management, viewing, retention, dissemination, and destruction of any associated media and records in accordance with the regulations of the Virginia Public Records Act 42.1-76 et seq. of the Code of Virginia.

The existence of this policy does not imply or guarantee that cameras will be monitored in real time 24 hours-a-day, seven days-a-week.

Exceptions:
This policy does not apply to:

1. Use of cameras solely for the purpose of:

   • remote monitoring of facility construction and progress;
   • videotaping of athletic events for post-game reviews;
   • carrying out human subject and animal research (which use is governed by University policies for research) or other legitimate educational purposes; and
   • monitoring a patient for clinical or behavioral reasons.

2. Use of cameras (whether stationary, body-worn, portable, or mobile) for:

   • covert operations conducted by law enforcement during criminal surveillance;
   • investigative or other law enforcement functions; and
   • parking enforcement.

1. Authority:
   Oversight of design, installation, maintenance, and utilization of networked cameras and associated policies, standards, and procedures lies with the Department of Safety and Security (DSS) and the Networked Camera Oversight Group. This includes:

   1. design, maintenance, and review of a University strategy for the procurement, deployment, and use of networked cameras, including this and related policies;
   2. design and approval of University standards for networked cameras and their use;
   3. creation of the standard University networked camera system or service;
   4. authorization of the placement of all networked cameras;
   5. authorization of the purchase of any new networked camera systems;
   6. review of existing networked camera systems and installations and identification of modifications required to bring them into compliance with this policy; and
   7. creation and approval of procedures for the use of networked cameras.

2. Networked Camera Placement:

   1. The Department of Safety and Security maintains oversight of temporary or permanent networked cameras on Grounds. As such, all installations must be approved by DSS.
   2. All networked camera equipment must comply with University standards for the equipment and must be connected to the University’s network.
   3. Departments and schools desiring the installation and use of networked cameras must submit a request for such installation to the Department of Safety and Security via the on-line Networked Camera Installation Request Form.
   4. All requests for networked cameras must include the location for the camera placement for the University facility or public space(s) and the identification of a funding source for the purchase and maintenance of the cameras.
   5. A member of the Department of Safety and Security team will follow up with the requester within 10 business days of receipt to schedule either a site-visit or otherwise collect the information needed for the Camera Oversight Group to review the request.
   6. The Networked Camera Oversight Group will review the request and either approve or deny the request.
   7. Upon approval by the Networked Camera Oversight Group, the Department of Safety and Security coordinates with the department/school and oversees all activities associated with completing the request.
   8. A Memorandum of Understanding (MOU) between the department/school and the Department of Safety and Security must be executed for all networked camera projects at the time the system is commissioned and turned over to the department/school for use.
   9. Use of networked cameras is limited to public areas. Video surveillance must not be conducted in private areas owned or controlled by the University unless specifically authorized by the Chief of Police.
   10. Networked cameras must not be directed at the windows of any privately-owned residence not located on University property. Pan Tilt Zoom (PTZ) cameras that can view windows of privately-owned residences must have the ability to “mask” these windows by utilizing prohibitive software designed to prevent viewing.
   11. Networked cameras authorized in private areas will be used narrowly to protect persons, money, real or personal property, documents, supplies, equipment, or pharmaceuticals from theft, destruction, diversion, or tampering.
   12. Inoperative, placebo, or “dummy” networked cameras must not be installed or utilized, as they may lead to a false sense of security that someone is monitoring an operational camera.
   13. If the Networked Camera Oversight Group denies the request, the requesting department/school, program, contractor, or University organization may seek approval of their department/school vice-president/dean or chief executive officer who may appeal the decision to the Networked Camera Oversight Group.
   14. Removal of cameras without authorization from the University Police Department (UPD) and the Networked Camera Oversight Group is prohibited.

3. Camera Monitoring and Access to Recordings:

   1. Monitoring: University cameras are not monitored continuously under normal operating conditions but may be monitored by University Police or other authorized personnel for legitimate safety, security, or operational purposes that include but are not limited to: monitoring restricted access areas/locations, monitoring traffic for special events, managing visitors, conducting investigations of alleged policy or criminal violations, and enhancing response of public safety agencies such as police, fire, and emergency medical services.
   2. Access: The University Police will review all requests regarding the release or review of recorded video. Release or review of recorded video images will not occur without authorization by UPD and in accordance with the law, and when appropriate, consultation with University Counsel.

4. Appropriate Use and Confidentiality:

   1. Video monitoring for security purposes is conducted in a professional, ethical, and legal manner. Monitoring individuals based on characteristics of race, gender, sexual orientation, disability, or other protected classification is prohibited.
   2. Personnel are prohibited from using or disseminating information acquired from University cameras, except for official purposes. All information and observations made in the use of cameras are considered internal use data and can only be used for authorized University and law enforcement purposes, or as otherwise required by law. University Counsel will have access to the recordings as needed and/or requested.
   3. Sharing of user credentials and passwords for camera access is strictly prohibited.
   4. Camera recordings must not be used in the course of personnel policy infractions unless approved by the Vice President & Chief Human Resources Officer (or designee).
   5. The use of camera recordings for any purpose not detailed within this policy is subject to review by the Department of Safety and Security.

5. Training:

   1. UPD Camera Control Operators must receive regular training in the technological, legal, and ethical parameters of appropriate camera use.
   2. All other individuals that have been granted camera access must be given a copy of this policy and be provided the appropriate level of training necessary.

6. Storage, Retention, Disposal of Recordings and Maintenance:

   1. Storage, retention, and disposal of recordings adhere to the regulations of the Virginia Public Records Act 42.1-76 et seq. of the Code of Virginia.
   2. Recorded video is stored for a period of no less than fourteen (14) days. When retained as part of a criminal investigation or court proceeding, or other bonafide use as approved by the Chief of Police (or designee) and the University Records Officer, retention may be longer.

7. Responsibilities:
   The Department of Safety and Security is responsible for:

   • Convening the Networked Camera Oversight Group as necessary.
   • On-going enterprise networked camera maintenance, assessment, and placement.
   • Collaborating with departments/schools to implement networked camera recommendations.
   • Coordinating the system design, purchase, operation, management, and monitoring of networked cameras pursuant to this policy.
   • Assessing new camera locations in coordination with Information Technology Services, UVA Medical Center, the Office of the Architect, Office of Facilities Management, and other stakeholders.
   • Developing and overseeing a preventative maintenance schedule to assure cameras remain in working order.
   • Developing and overseeing a system to recognize inoperable cameras.

   Information Technology Services is responsible for:

   • Maintaining a separate virtual network for the video management system.
   • Enabling networking for camera locations as needed.

   The Office of the Architect is responsible for:

   • Assessing new camera locations in coordination with the Networked Camera Oversight Group.
   • Assisting in the installation and maintenance of cameras as needed for the preservation of architectural standards.

   Departments Using the Video Management System are responsible for:

   • Designating a camera oversight representative to liaison with Safety and Security.
   • Identifying those individuals within their department that should have access to view cameras.
   • Maintaining installed cameras in coordination with the Department of Safety and Security.
   • Complying with this policy.

   University faculty, staff, and Medical Center Employees are responsible for:

   • Reporting any person who tampers with or destroys video cameras or equipment to the University Police Department.

   The Office of Facilities Management is responsible for:

   • Assisting in the installation of cameras as needed.
   • Facilitating compliance with this policy in coordination with subcontractors.

8. Compliance with Policy:
   Failure to comply with the requirements of this policy may result in disciplinary action up to and including termination and expulsion in accordance with relevant University policies.

   Anyone who tampers with or destroys video cameras or equipment (including hacking, intercepting, interrupting, or interfering with service) is subject to criminal prosecution and University action, as applicable.

   Questions about this policy should be directed to the Department of Safety and Security.