Challenges and objectives
This UK subsidiary of a global home furnishing retailer, with over 470 stores in 63 markets, required a new video redaction process due to the substantial increase in video footage requests. The retailer was looking for a process which would comply with data privacy laws and confidently fulfil its duty when responding to requests.
Its existing process posed the following risks.
Failure to comply with data privacy laws – sending an unredacted video outside of the company provides a risk of someone intercepting the file, or it being accidentally shared externally
Budget uncertainty – video requests ranged from 5 minutes to over an hour, and with the retailer being charged per minute, it could not effectively set a budget
Missing a deadline – if the video received back was not suitable, or with sending externally, they do not have control of the process, and making sure it met the deadline
The retailer receives between 12 to 15 requests per month; these often stem from employees, shoppers, the police and insurance companies, with over 50% of these deriving from insurance. By law, when footage is shared, all individuals not involved in the request must be redacted, to avoid fines and maintain its excellent reputation.
Ease of use and speed was key to the retailer’s Data Privacy Specialist who would be operating the software. They are involved with various data privacy projects, and being able to dedicate time to respond to video requests is a challenge.
The retailer currently uses a third-party provider, therefore it sends any footage which needs to be redacted outside of the organisation. Sending unredacted footage off site is a risk, and if there is a breach, the retailer is at risk of a substantial fine and damage to its reputation.
Using a third-party also amplifies the time pressure of responding to a request. When the video is delivered back to the Data Privacy Specialist, they review to ensure it is suitable to be released to the data subject. If there is an issue, this leads to further back and forth with the third party, and risks the retailer missing the deadline.
The retailer also spent a large amount of money redacting videos, paying for each minute redacted. This meant the cost varied from just under £800 to over £4,000 for each request, depending on the length of the video. If the retailer redacted 15 videos that were 10 minutes long, this would cost over £12,000 in one month alone.