Other Requests for information

Unfortunately, the University is unable to routinely process requests for information for insurance purposes, unless by order of the Court in connection with legal proceedings. 

In some restricted circumstances, we may be able to support requests from individuals affiliated with the University (students, staff etc.) under Schedule 2, Part 1(5) of the Data Protection Act.  We will also respond to requests from the police or associated agencies. Court orders can be requested from the courts under the Court Procedure Rules, part 31(12) (disclosure and inspection of documents). Court orders must come directly from the court to the University. If you intend to obtain a court order, we recommend that you first notify us in writing as soon as possible, using the contact details provided at the bottom of this page, so that we can: 1) confirm whether any footage is held; and 2) take steps to preserve a copy of the footage (if held), prior to expiry of the standard 30-day retention period.

This below guidance explains briefly how CCTV is used by the University, and how we handle requests for information for copies of footage.

CCTV at the University

Manchester Metropolitan University’s Security Strategy provides a framework for managing the security of the campus, staff, students and visitors. The strategy helps to ensure that appropriate measures are in place so that all users of the campus can conduct their activities in a safe and secure environment.

The use of a Close Circuit Television (CCTV) system is an essential component to the University’s Security Strategy. The University has installed cameras at strategic locations around the campus, which are monitored 24 hours a day, 365 days a year. The cameras record images, but not audio. Footage is held as standard for 30 days, after which point it is deleted.

Subject Access Requests

Manchester Metropolitan University will consider requests for footage made under a Subject Access Request (SAR) from anyone who may have been captured on the CCTV system. However, please be aware that the University cannot release CCTV footage in response to a SAR where third party individuals can be identified, unless those parties have consented to the disclosure.

If no data is held regarding your request, or the data falls into a category exempted from disclosure, you will be notified in writing.

Road Traffic Collisions

If you have been involved in a road traffic collision without Police involvement, you will need to obtain a court order under the Court Procedure Rules, part 31(12) (disclosure and inspection of documents). This must come directly from the court to the University. If you intend to obtain a court order, we recommend that you first notify us in writing as soon as possible, using the contact details provided at the bottom of this page, so that we can: 1) confirm whether any footage is held; and 2) take steps to preserve a copy of the footage (if held), prior to expiry of the standard 30-day retention period.

If you have been involved in a road traffic collision with Police involvement, you should notify the police that there may be relevant CCTV footage, as the University is able to respond to disclosure requests directly from the police in appropriate circumstances.

Crimes and Incidents

If you have been the victim of a crime, or subject to a crime-related incident, you should report the matter directly to the Police by either calling 999 in an emergency, or 101 in a non-emergency. MMU’s campus security can also be contacted using contact details here.

The University can respond to requests for access to CCTV footage directly from the Police, in appropriate circumstances.

Contact us

If you would like to submit a Subject Access Request for CCTV footage, you can find more information on how to do this via our Subject Access Guidance.

All other non-emergency requests for CCTV footage should be directed to the Data Protection Team in Legal Services at: dataprotection@mmu.ac.uk. We advise where possible, requests should be made in writing.

The below guidance is targeted at law enforcement agencies (such as the Police), and explains how to request information from Manchester Metropolitan University. It also explains how such requests are handled and processed in line with UK data protection legislation.

Quick guide:

If you are a Police Officer or a staff member from a relevant law enforcement agency, and you would like to request information from Manchester Metropolitan University for law enforcement purposes, please ensure you have read all the information on this page. The main steps you will need to take are:

1) Complete a relevant personal data disclosure form from your organisation, or use Manchester Metropolitan’s law enforcement personal data request form. This form should clearly set out the information you require and why, your lawful basis for requesting this information and the relevant basis for the University being able to disclose this information, and relevant sign-off on behalf of your organisation.

2) Send the form to securitydutymanager@mmu.ac.uk, marking ‘high priority’ if applicable. This address is monitored 24 hours a day, 7 days a week. Please do not send your request to any other email address.

3) Alternatively, if your request is urgent, you telephone the campus security team using details on the ‘contact us’ page. Please note, we will only respond directly to requests of an urgent nature, such as in instances of life or death, to prevent serious physical harm, protect public health or national security, or safeguard vulnerable adults and children. We will still need to take steps to confirm your identity prior to disclosure.

4) You will receive a response from the relevant team at the University in due course.

5) Requests in person can also be made in emergency situations to members of our security team, Security Control at Cambridge Halls, All Saints Campus, M5 6UU.

Manchester Metropolitan University sometimes receive requests from law enforcement agencies such as the Police, HMRC, as well as other public bodies identified as ‘competent authorities’ under Schedule 7 of the Data Protection Act 2018.

These requests are for law enforcement purposes, which are the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security. They can be requests for any information held by the University, but often they concern access to CCTV footage, body worn camera footage, recent contact details for student or staff, or background information about a relevant individual to help support an investigation.

The University will process these requests in line with its obligations under the UK GDPR and the Data Protection Act 2018. On occasion, University staff may require further information from the requestor to help to identify which information is required, or to satisfy ourselves that such a disclosure is warranted, proportionate and justified. We will assess each request on its own merits.

All requests should:

• Unless urgent, be in written form using the requesting organisation’s personal data request form, or Manchester Metropolitan’s law enforcement personal data request form. This should be emailed to securitydutymanager@mmu.ac.uk in all instances.

Note: verbal requests or requests in person can be made in emergency situations such as in instances of life or death, to prevent serious physical harm, protect public health or national security, or safeguard vulnerable adults and children. Please use the emergency number for campus security available on our ‘contact us’ page or visit the central office at Security Control at Cambridge Halls, All Saints Campus, M5 6UU.

• Clearly state the information which is required, including relevant descriptions and details which may help us to locate the information required. The university holds information relating to thousands of students and staff; providing as much detail as you are able at an early stage will help us to locate relevant information quickly and efficiently. This will speed up the request and response process.
• If requesting CCTV footage, request forms should detail dates, time, location and a description of what the footage captures e.g., vehicle details, registration numbers, make/model, colour, description of any individuals of interest.
• State in as much detail as possible the purpose of the request, and reasons the information is required.
• Explain the legal basis for making the request. For example, for prevention/ investigation/ detection of criminal offences, prosecution of individuals, safeguarding against threats to national security, protection of the vital interests of an individual, or other purpose. If possible, please also state specific lawful basis under the UK GDPR and Data Protection Act 2018.
• Explain whether the individual can be notified about the request, or if to notify them may prejudice the purpose.
• Include whether a data subject has provided consent for the information to be provided, and if so, a copy of the consent form.
• Contain any other information that may be relevant, such as timeframes, related risks to others, or other information the University should know about.
• Include sign-off from a relevant individual. This may include a counter-signature from a senior staff member, if this is the requesting organisations policy.

On receiving a request, our security teams will review and engage with an appropriate team within the University. This means that depending on the nature of an enquiry, the response may not come directly from a member of our security team. For example, University Prevent, Counselling or Safeguarding teams may respond to the law enforcement agency.