Do you use CCTV? How do keep on the right side of data protection legislation?