Genetec recognises data privacy day by sharing physical security best practices

In recognition of International Data Privacy Day, Genetec Inc., a technology provider of unified security, public safety, operations, and business intelligence solutions, shared data protection best practices to help physical security pioneers protect privacy, safeguard data, and enable trust without compromising security.

Data privacy has become a global top priority. Currently, 71% of countries have initiated data privacy legislation, and companies that haven’t taken appropriate steps to protect data are facing tens of millions of dollars in fines for violations.

Security and privacy

By following best practices in physical security solutions, organisations can have highest security levels"

In the physical security industry, acquiring digital information such as surveillance footage, photos, and licence plate information is necessary to help protect people and assets and provide a valuable source of actionable business intelligence.

"Security and privacy are not mutually exclusive,” said Christian Morin, Chief Security Officer at Genetec Inc. “By following best practices and ensuring privacy is designed into their physical security solutions, organisations can have the highest levels of security while respecting personal privacy and complying to privacy laws.”

Best practices

Best practices for ensuring video surveillance, access control, and automatic licence plate recognition systems meet data privacy standards include:

• Collect and store only the data the organisation truly needs. Reduce exposure to risk in the event of a data breach with simple steps. Consider adjusting a camera’s field of view so it doesn’t record areas that do not require monitoring.

Set protocols to automatically archive or delete physical security data based on relevance. And carefully control what data, how much, and for how long it can be shared with other organisations.

Using an identity provider, like Microsoft Active Directory, can help eliminate human error by automating the processes

• Limit access to sensitive data. Grant access to data only to those who need it to do their jobs and monitor those activities to ensure identifying information, like images and access events, is used only as intended.

Review access rights regularly so privileges align with user requirements. Using an identity provider, like Microsoft Active Directory, can also help eliminate human error by automating the processes of adding/removing security user accounts, granting rights, or removing users who have left the organisation.

• Anonymise data collection automatically. New technologies can automatically restrict and protect access to personal data. Consider deploying privacy masking like Genetec KiwiVision™ Privacy Protector which automatically anonymises images of people, so organisations can continue to survey surveillance footage while respecting privacy.

This technology also offers an additional layer of security that ensures only authorised users can “unlock” and view unmasked footage while maintaining an audit trail.

A unified system simplifies the process of tracking system and device health and streamlines software and firmware updates

• Unify organisations' security solutions. When video surveillance, access control, evidence management, and other sensors operate under one platform, it becomes much easier to access and manage all the data and create reports for a variety of systems and sensors from a single interface.

A unified system simplifies the process of the tracking system and device health and streamlines software and firmware updates which are key to mitigating the threat of data breaches.

• Work with certified partners. Make sure the system providers are properly certified (ISO 27001, 27017 standards, UL 2900-2-3 level 3 cybersecurity certification, and SOC2 compliance), and that they develop all their technology based on principles of privacy.

A cyber-resilient physical security system will contribute to keeping the data collected from IoT devices and sensors across the physical security network private.