Back to Blog
The CCTV operator's role sits at an interesting legal intersection. You are not physically present at the incident. You are often the most detailed witness to it.
What you record in your monitoring log from the moment you first observe something unusual is contemporaneous evidence. A defence barrister cannot cross-examine a CCTV log the way they can cross-examine a guard who was on the ground. But they can — and will — challenge it if it is incomplete, vague, or inconsistent with the footage.
Your log needs to be able to stand next to the footage and match it, time-stamp by time-stamp.
What Your Monitoring Log Must Capture
The time you first observed the behaviour that drew your attention — not the time you decided to take action, the time you first looked. The camera number and location. A description of what you observed, in specific and objective terms. The time you notified other staff, who you notified, and what you said. The time you called police if applicable, the force reference number, what you reported, and what you were told.
Every significant development in the sequence of events needs a time. Not approximate. The exact time shown on the monitoring system clock.
The CCTV Preservation Note
This is the element most frequently missing from CCTV operator records, and it causes the most downstream damage.
If an incident occurs and you do not make a contemporaneous note of which cameras covered it, the time range of relevant footage, and who was asked to ensure preservation, that footage may be overwritten before anyone retrieves it. Most systems overwrite within 24 to 72 hours.
Your monitoring log should include, for every incident: camera numbers covering the event, the time range of relevant footage, who you informed about preservation, and at what time. If you personally exported or flagged the footage, record that too.
GDPR and Your Monitoring Log
CCTV monitoring is a data processing activity under UK GDPR. Your monitoring log is part of the audit trail that demonstrates lawful processing. If an individual exercises their Subject Access Request right and asks for footage of themselves, your log establishes the legal basis under which it was captured and retained.
This is not theoretical. Subject Access Requests in connection with security incidents are common, particularly where a civil claim is anticipated.
When Your Log Will Be Scrutinised
Police investigation. Civil litigation. SIA inquiry. Employment tribunal — if a member of staff was observed and disciplined on the basis of your monitoring. Insurance claim. Subject Access Request under UK GDPR.
In each of these situations, someone will read your log and compare it to the footage. Gaps will be noticed. Vague language will be challenged. Inconsistencies between the log and the footage will raise questions about your competence or your honesty.
The standard you should write to is simple: if someone who was not present reads this log alongside the footage, they should be able to reconstruct exactly what happened, when, and what was done about it.
Original Note includes a CCTV monitoring log template that structures every required element and seals the record on submission — so the log is timestamped at the point of creation, not retrospectively.
Try Original Note free for 7 days. No credit card required.