An Inquiring Mind asks: "A good friend's employer has recently installed a CCTV system in the office she works at. This is not unusual in itself, but there is no notice that CCTV is in use, and no company policy regarding CCTV use in employee monitoring, data retention, or anything else. My understanding is that CCTV use in the UK is covered by the DPA (Data Protection Act) if: it is used to gather information about an individual; is monitored remotely; or is given to people other than law enforcement bodies (this from a CCTV/PDA document [pdf], from the website of the Information Commissioner's Office). If it does fall under the remit of the DPA, then they would need at least signage, and a policy for the retention of the data. Given that this camera would likely fall foul of the DPA, that challenging the employer would be career suicide (due to internal politics), and that she has nothing to hide -- what do other Slashdot readers think should be the next step for my friend: principled but suicidal stand, or quiet annoyance?" Much of what is allowed depends on the law of the land in your area. Depending on what the laws do and do not allow, how would you safely approach your employers to air your concerns on this subject?