Conduct a Data Protection Impact Assessment (DPIA)
Data protection law has changed - new legislation states that Data Protection Impact Assessments (DPIAs) must be carried out prior to the roll-out of any intrusive surveillance system - CCTV in taxis is likely to be one of these systems. You need to be able to demonstrate you have conducted a DPIA to the ICO.
Quote:
Data protection impact assessments
Where a type of processing of personal data, using new technology, and considering the
nature, scope, context and purposes of the processing, is likely to result in a high risk to the
privacy of individuals then Officers MUST prior to the processing, carry out an assessment of
the impact of the envisaged processing operations on the individuals