I was bemused by your comments regarding CCTV that suggested that anyone could install it without recourse to legislation. Surely you can't believe this to be true? The Data Protection Act (1988) covers the use, retention, rights, security and transfer of data. The Information Commissioner also provides a CCTV code of practice, which advises on all the elements referred to in your piece.
You do our industry a disservice to posit the issues in such a way, rather than referring to where the guidance is and how best to manage the situation. There is absolutely no need for more regulation. Rather, it's time the security industry was encouraged (nay mandated) to be expert in the area of data protection, given the concerns regarding data aggregation, surveillance etc.
Andrea Simmons, consultant manager, BCS Security Forum.